156-115.77 Exam - Free Actual Q&As, Page 1

156-115.77 Actual Exam Questions

Last updated on Nov. 16, 2024.

Vendor:Checkpoint

Exam Code:156-115.77

Exam Name:Check Point Certified Security Master

Exam Questions:46

Topic 1 - Single Topic

Question #1 Topic 1

When troubleshooting a VPN site-to-site to a peer, it may be necessary to "down" the tunnel. What is the best method to remove ONLY the tunnel to this peer?

A. Change the vpn tunnel sharing parameters to force the tunnel down.
B. Reboot your gateway.
C. Remove the peer from the community and install policy.
D. Delete the IKE and IPsec Security Associations using the command vpn tu.

Reveal Solution Discussion

Correct Answer: D 🗳️

Question #2 Topic 1

In Check Point, Domain-based VPN's take precedence over route-based VPN. If implementing a route-based VPN, what is one configuration step you must make on the gateway object taking part in the route-based VPN?

A. You should remove the gateway from all communities.
B. Check Point does not support route-based VPN's.
C. You need to create a new simple group with no objects in it and apply this as the VPN domain under that gateway's topology tab.
D. You should check the "Use route-based VPN" checkbox in the community properties.