Check Point Certified Security Expert (CCSE) R77

1.

For Management High Availability, if an Active SMS goes down, does the Standby SMS automatically take over?

Yes, if you set up VRRP Yes, if you set up ClusterXL No, the transition should be initiated manually Yes, if you set up SecureXL

2.

For Management High Availability synchronization, what does the Advance status mean?

The peer SMS has not been synchronized properly. The peer SMS is properly synchronized. The peer SMS is more up-to-date. The active SMS and its peer have different installed policies and databases.

3.

Which of the following would be a result of having more than one active Security Management Server in a Management High Availability (HA) configuration?

An error notification will popup during SmartDashboard login if the two machines can communicate indicating Collision status. The need to manually synchronize the secondary Security Management Server with the Primary Security Management Server is eliminated. Allows for faster seamless failover: from active-to-active instead of standby-to-active. Creates a High Availability implementation between the Gateways installed on the Security Management Servers.

4.

When distributing IPSec packets to gateways in a Load Sharing Multicast mode cluster, which valid Load Sharing method will consider VPN information?

Load Sharing based on SPIs Load Sharing based on IP addresses, ports, and serial peripheral interfaces Load Sharing based on IP addresses, ports, and security parameter indexes Load Sharing based on ports, VTI, and IP addresses

5.

Which load-balancing method below is NOT valid?

Domain They are all valid Round Trip Random

6.

Included in the clients network are some switches, which rely on IGMP snooping. You must find a solution to work with these switches. Which of the following answers does NOT lead to a successful solution?

Set the value of fwha_enable_igmp_snooping module configuration parameter to 1. Disable IGMP registration in switches that rely on IGMP packets ClusterXL supports IGMP snooping by default. There is no need to configure anything. Configure static CAMs to allow multicast traffic on specific ports.

7.

The customer wishes to install a cluster. In his network, there is a switch which is incapable of forwarding multicast. Is it possible to install a cluster in this situation?

No, the customer needs to replace the switch with a new switch, which supports multicast forwarding. Yes, you can toggle on ClusterXL between broadcast and multicast using the command cphaconf set_ccp broadcast/multicast. Yes, the ClusterXL changes automatically to the broadcast mode if the multicast is not forwarded. Yes, you can toggle on ClusterXL between broadcast and multicast by setting the multicast mode using the command cphaconf set_ccp multicast on

8.

What could be a reason why synchronization between primary and secondary Security Management Servers does not occur?

If the set of installed products differ from each other, the Security Management Servers do not synchronize the database to each other. You have installed both Security Management Servers on different server systems (e. g. one machine on HP hardware and the other one on DELL). You are using different time zones. You did not activate synchronization within Global Properties.

9.

You are establishing a ClusterXL environment, with the following topology:
VIP internal cluster IP = 172.16.10.3; VIP external cluster IP = 192.168.10.3
Cluster Member 1: 4 NICs, 3 enableD. hme0: 192.168.10.1/24, hme1: 10.10.10.1/24, qfe2: 172.16.10.1/24
Cluster Member 2: 5 NICs, 3 enabled; hme3: 192.168.10.2/24, hme1: 10.10.10.2/24, hme2: 172.16.10.2/24

External interfaces 192.168.10.1 and 192.168.10.2 connect to a VLAN switch. The upstream router connects to the same VLAN switch. Internal interfaces 172.16.10.1 and 172.16.10.2 connect to a hub. 10.10.10.0 is the synchronization network. The Security Management Server is located on the internal network with IP 172.16.10.3. What is the problem with this configuration?

The Cluster interface names must be identical across all cluster members. Cluster members cannot use the VLAN switch. They must use hubs. The Security Management Server must be in the dedicated synchronization network, not the internal network. There is an IP address conflict.

10.

In which ClusterXL Load Sharing mode, does the pivot machine get chosen automatically by ClusterXL?

Hot Standby Load Sharing Multicast Load Sharing Unicast Load Sharing CCP Load Sharing

Check Point Certified Security Expert (CCSE) R77

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

COMPANY

Products

OTHERS

Partner

Check Point Certified Security Expert (CCSE) R77

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

Detail Form

COMPANY

Products

OTHERS

Partner