Name: CheckPoint 156-115.77 Exam
Brand: Pass4Success
SKU: 156-115.77
Price: 69.00 USD
Availability: InStock
Rating: 4.7 (175 reviews)

Disscuss CheckPoint 156-115.77 Topics, Questions or Ask Anything Related

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!

Free CheckPoint 156-115.77 Exam Actual Questions

The questions for 156-115.77 were last updated On 13-10-2016

Question #1

You are using an IPV6 environment and find that you need additional access control and want to set up some directional VPN rules. How can you restrict access based on destination?

AThis can only be done in Traditional Mode VPN.

BDirectional VPN enforcement feature is not supported for IPv6.

CEnable Global Properties > Advanced > IPv6 for directional VPN enforcement.

DSet your rule match to ''All_gwtogw'' and create a new rule.

Reveal Solution

Correct Answer: B

Question #2

You are trying to set ''VPN Directional Match'' on the VPN column but the ''Directional Match Condition'' option is not there. Why is this missing?

AThe peer does not support this feature.

BThis can only be done in Traditional Mode.

CYou must turn this feature on through Global Properties > VPN > Advanced, then select Enable VPN Directional Match in VPN column.

DThis must be enabled on the Gateway in ''Advanced Settings''.

Reveal Solution

Correct Answer: C

Question #3

How do you designate the ''enforcement point gateway'' for the peers involved in ''VPN Directional Enforcement''?

AFrom the WebUI's of the peers add a static route to the ''designated enforcement point''.

BIn the file $FWDIR/conf/user.def on each peer with a route entry to the enforcement point gateway.

CDesignate this gateway in the VPN community properties.

DEditing file $FWDIR/conf/vpn_route.conf on each peer with a route entry to the enforcement point gateway.

Reveal Solution

Correct Answer: D

Question #4

How does the ''Directional Enforcement'' rule manage subsequent packet inspection?

A''Directional Enforcement'' is only applied to the first packet of the connection, including packets in the opposite direction.

B''Directional Enforcement'' is applied to all packets in the connection.

C''Directional Enforcement'' applies only to the first packet of the connection, but does not include the packets in the opposite direction.

D''Directional Enforcement'' is considered trusted traffic and therefore is not inspected.

Reveal Solution

Correct Answer: A

Question #5

How do you add the route entry for the ''Enforcement Point Gateway'' on the Management Server?

ADesignate this gateway in the VPN community properties.

BUpdate file $FWDIR/conf/user.def on each peer with a route entry to the enforcement point gateway.

CEdit file $FWDIR/conf/vpn_route.conf with a new route entry.

DEdit peers' WebUI to add a static route to the ''designated enforcement point''.

Reveal Solution

Correct Answer: C

Unlock all 156-115.77 Exam Questions with Advanced Practice Test Features:

Select Question Types you want
Set your Desired Pass Percentage
Allocate Time (Hours : Minutes)
Create Multiple Practice tests with Limited Questions
Customer Support

Get Full Access Now