Free CheckPoint 156-915.77 Exam Dumps Questions & Answers

What is a task of the Smart Event Server?

• A.  Assign a severity level to an event.
• B.  Display the received events.
• C.  Analyze each IPS log entry as it enters the Log server.
• D.  Forward what is known as an event to the Smart Event Server.

To back up all events stored in the Smart Event Server, you should back up the contents of which folder(s)?

• A.  $RTDIR/distrib_db and $FWDIR/events
• B.  $RTDIR/distrib
• C.  $RTDIR/distrib and $RTDIR/events_db
• D.  $RTDIR/events_db

Even after configuring central logging on Connecter, Connecter logs are not displaying in Smart View Tracker. What could be the cause of this problem?

• A.  R70 does not support a host object with the same IP address as a Management Server used as secondary log server or management station.
• B.  You must install the Security Policy, and try again.
• C.  You must install the Management Server database.
• D.  You must reestablish logging from Connecter to the Management Server, using a dummy log-server object.

Which of the following are valid PKI architectures?

• A.  Hierarchical architecture
• B.  Bridge architecture
• C.  mesh architecture
• D.  Gateway architecture

You are responsible for the IPS configuration of your Check Point firewall. Inside the Denial of service section you need to set the protection parameters against the Teardrop attack tool with high severity. How would you characterize this attack tool? Give the BEST answer.

• A.  Hackers can send high volumes of non-TCP traffic in an effort to fill up a firewall State Table. This results in a Denial of Service by preventing the firewall from accepting new connections. Teardrop is a widely available attack tool that exploits this vulnerability.
• B.  Some implementations of the TCP/IP IP fragmentation re-assembly code do not properly handle overlapping IP fragments. Sending two IP fragments, the latter entirely contained insidethe former, causes the server to allocate too much memory and crash. Teardrop is a widely available attack tool that exploits this vulnerability.
• C.  Some implementations of TCP/IP are vulnerable to packets that are crafted in a particular way (a SYN packet in which the source address and port are the same as the destination, i.e., spoofed). Teardrop is a widely available attack tool that exploits this vulnerability
• D.  A remote attacker may attack a system by sending a specially crafted RPC request to execute arbitrary code on a vulnerable system. Teardrop is a widely available attack tool that exploits this vulnerability.