NO.1 Which of the following statements about Full HA support with IPv6 is NOT true?
A. There is no Dynamic Routing with IPv6.
B. Mirrored Interfaces must have IPv4 addresses.
C. Sync traffic must be IPv4.
D. IPv6 does not support a Secondary Management Server.
Answer: D

CheckPoint   156-115.77 Actual Test   156-115.77 Exam Cost
Explanation:
Topic 11, Advanced VPN

NO.2 You are trying to troubleshoot a NAT issue on your network, and you use a kernel debug to
verify a connection is correctly translated to its NAT address. What flags should you use for the kernel
debug?
A. fw ctl debug -m fw + conn drop nat vm xlate xltrc
B. fw ctl debug -m fw + conn drop ld
C. fw ctl debug -m nat + conn drop nat xlate xltrc
D. fw ctl debug -m nat + conn drop fw xlate xltrc
Answer: A

CheckPoint   156-115.77 exam dumps   156-115.77 test questions

NO.3 What is the function of the setting "no_hide_services_ports" in the tables.def files?
A. Preventing the secondary member from hiding its presence by not forwarding any packets.
B. Allowing management traffic to be accepted in an applied rule ahead of the stealth rule.
C. Hiding the particular tables from being synchronized to the other cluster member.
D. Preventing outbound traffic from being hidden behind the cluster IP address.
Answer: D

CheckPoint dumps   156-115.77   156-115.77   156-115.77 Actual Test   156-115.77 test questions   156-115.77 Training online
Explanation:
Topic 4, VPN Troubleshooting

NO.4 Where do you configure the file user.def to change the encryption domain of the Security
Gateway?
A. Management Server
B. Endpoint Client
C. Security Gateway
D. interoperable device
Answer: A

CheckPoint Exam Cram   156-115.77 Free download   156-115.77 Exam PDF

NO.5 ACME Corp has a cluster consisting of two 13500 appliances. As the Firewall Administrator,
you notice that on an output of top, you are seeing high CPU usage of the cores assigned as SNDs, but
low CPU usage on cores assigned to individual fw_worker_X processes. What command should you
run next to performance tune your cluster?
A. fw ctl debug -m cluster + all - this will show you all the connections being processed by ClusterXL
and explain the high CPU usage on your appliance.
B. fwaccel off - this will turn off SecureXL, which is causing your SNDs to be running high in the first
place.
C. fwaccel stats -s - this will show you the acceleration profile of your connections and potentially why
your SNDs are running high while other cores are running low.
D. fw tab -t connections -s - this will show you a summary of your connections table, and allow you to
determine whether there is too much traffic traversing your firewall.
Answer: C

CheckPoint Latest Dumps   156-115.77 Braindumps   156-115.77 test
Explanation:
Topic 8, Enable CoreXL

NO.6 Since switching your network to ISP redundancy you find that your outgoing static NAT
connections are failing. You use the command _________ to debug the issue.
A. fwaccel stats misp
B. fw ctl pstat
C. fw ctl debug -m fw + nat drop
D. fw tab -t fwx_alloc -x
Answer: C

CheckPoint certification   156-115.77 Bootcamp   156-115.77   156-115.77 Test Answers   156-115.77 Actual Test

NO.7 What is the prefix name for the interface when creating an unnumbered VTI in GAIA?
A. VTii
B. tun
C. vpnt
D. VTI
Answer: C

CheckPoint answers real questions   156-115.77 Actual Test   156-115.77 Bootcamp   156-115.77 certification

NO.8 When VPN user-based authentication fails, which of the following debug logs is essential to
understanding the issue?
A. VPN-1 kernel debug logs
B. IKE.elg
C. Vpnd.elg
D. fw monitor trace
Answer: B

CheckPoint practice test   156-115.77 exam   156-115.77 Test Answers   156-115.77 Exam PDF

We are aware that the IT industry is a new industry. It is one of the chain to drive economic development. So its status can not be ignored. IT certification is one of the means of competition in the IT industry. Passed the certification exam you will get to a good rise. But pass the exam is not easy. It is recommended that using training tool to prepare for the exam. If you want to choose this certification training resources, ITCertTest's CheckPoint 156-115.77 exam training materials will be the best choice. The success rate is 100%, and can ensure you pass the exam.

Success is has method. You can be successful as long as you make the right choices. ITCertTest's CheckPoint 156-115.77 exam training materials are tailored specifically for IT professionals. It can help you pass the exam successfully. If you're still catching your expertise to prepare for the exam, then you chose the wrong method. This is not only time-consuming and laborious, but also is likely to fail. But the remedy is not too late, go to buy ITCertTest's CheckPoint 156-115.77 exam training materials quickly. With it, you will get a different life. Remember, the fate is in your own hands.

CheckPoint certification 156-115.77 exam is the first step for the IT employees to set foot on the road to improve their job. Passing CheckPoint certification 156-115.77 exam is the stepping stone towards your career peak. ITCertTest can help you pass CheckPoint certification 156-115.77 exam successfully.

Exam Code: 156-115.77
Exam Name: Check Point Certified Security Master
One year free update, No help, Full refund!
156-115.77 VCE Dumps Total Q&A: 295 Questions and Answers
Last Update: 08-11,2015

156-115.77 Training online Detail: 156-115.77 VCE Dumps

ITCertTest offer the latest C2180-404 exam material and high-quality ACE001 pdf questions & answers. Our VCPN610 VCE testing engine and 1z1-475 study guide can help you pass the real exam. High-quality 070-461 dumps training materials can 100% guarantee you pass the exam faster and easier. Pass the exam to obtain certification is so simple.

156-115.77 Braindumps: http://156-115.77.actualtests.xyz

Article Link: http://www.itcerttest.com/156-115.77_braindumps.html