CCSM 156-115.77 Reddit Questions

Check Point Certified Security Master Questions and Answers

Question 17

Which of the following IPS Layers is the "brain" of the IPS? That is, what coordinates between different components, decides which protections should run on a certain packet, decides the final action to be performed on the packet and issues an event log?

Options:

Protections

Passive Streaming Library (PSL)

Protocol Parsers

Context Management Interface layer (CMI)

Question 18

You have strict IPS corporate guidelines. This is having a performance impact on the firewall. What steps could you take to minimize this impact without compromising the corporate policy?

Options:

Select “Protect Internal hosts only”

Select “Bypass IPS inspection when gateway is under heavy load”

Select “Perform IPS inspection on all traffic”

Without minimizing signatures you cannot improve performance

Question 19

You have spent time configuring the IPS profile on your primary gateway firewall. You want to ensure that this profile can be applied to all gateway firewalls in your environment. How can you share this information between firewalls?

Options:

From the command line, run: ips_export [-o ] [-p ].

IPS profiles must be manually configured on each gateway.

From the Smart Dashboard IPS tab select export IPS profiles and select the gateway to send this export to.

From the command line, run: ips_export_import export [-o ] [-p ].

Question 20

When using Geo Protections, you find there are logs for a country that you believe is incorrect. What file do you review to verify what country Geo Protections should identify the traffic as?

Options:

asm.C

objects.C

objects_5_0.C

IpToCountry.csv

Labour Day Special - Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: top65certs

Check Point Certified Security Master Questions and Answers

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer: