CheckPoint 156-115.77 Actual Free Exam Questions & Community Discussion

Exam Code/Number: 156-115.77
Exam Name/Title: Check Point Certified Security Master
Certification Provider: CheckPoint
Corresponding Certification: CCSM

Exam Questions: 295
Updated On: Jun 08, 2026

Question #43

Which directory below contains the URL Filtering engine update info? Here you can also go to see the status of the URL Filtering and Application Control updates.

A. $FWDIR/appi/update

B. $FWDIR/urlf/update

C. $FWDIR/appi/urlf

D. $FWDIR/update/appi

Discussion 0

Correct Answer: A Vote an answer

Question #44

Which of the following IPS Layers is responsible for ensuring that only valid retransmission packets are allowed to proceed to destinations?

A. Protections

B. Passive Streaming Library (PSL)

C. Context Management Interface layer (CMI)

D. Protocol Parsers

Discussion 0

Correct Answer: B Vote an answer

Question #45

Adam wants to find idle connections on his gateway. Which command would be best suited for viewing the connections table?

A. fw tab -t connections -u -f

B. fw tab -t connections -x

C. fw tab -t connections -s

D. fw tab -t connections

Discussion 0

Correct Answer: A Vote an answer

Question #46

You have created a number of profiles and activated the relevant protections. Afterwards, you decide that the 'Enterprise gateway' should allow instant messaging. The current profile enabled for Enterprise gateway blocks instant messaging. The profile for the Enterprise gateway is currently being used on the Voyager gateway and the Bird of Prey gateway. What is the best process for making this change on the Enterprise gateway only?

A. Create a rule allowing that traffic and install it on the Enterprise gateway

B. Create a new profile and apply to the Enterprise gateway

C. Create an exception for the Enterprise gateway

D. Edit the existing profile

Discussion 0

Correct Answer: C Vote an answer

Question #47

You would like to configure unnumbered VTIs and your environment uses load sharing clustering. Would this clustering technology be supported by your unnumbered VTI's?

A. Yes, unnumbered VTIs only support clustering load sharing.

B. Yes, all HA modes are supported.

C. No, unnumbered VTIs only support VRRP HA active-passive mode.

D. No, unnumbered VTIs do not support any HA modes.

Discussion 0

Correct Answer: C Vote an answer

Question #48

What VSX components do not support IPv6 in R77 VSX mode?

A. Virtual Routers

B. VSX mode does not support IPv6

C. Virtual Systems

D. All devices support IPv6

Discussion 0

Correct Answer: A Vote an answer

Question #49

While troubleshooting a VPN issue between your gateway and a partner site you see an entry in Smartview Tracker that states "Info: encryption failure: Different community ID: possible NAT problem". Which of the following is the most likely cause?

A. You have not created a specific rule allowing VPN traffic.

B. You have the wrong encryption domains configured.

C. Implied rules in global properties such as ICMP and DNS are set to first instead of before last.

D. You have an encryption method mismatch.

Discussion 0

Correct Answer: C Vote an answer

Question #50

You have spent time configuring the IPS profile on your primary gateway firewall. You want to ensure that this profile can be applied to all gateway firewalls in your environment. How can you share this information between firewalls?

A. IPS profiles must be manually configured on each gateway.

B. From the command line, run: ips_export <profile-name> [-o <export-file-name>] [-p <ip>].

C. From the Smart Dashboard IPS tab select export IPS profiles and select the gateway to send this export to.

D. From the command line, run: ips_export_import export <profile-name> [-o <export-file-name>] [-p <ip>].

Discussion 0

Correct Answer: D Vote an answer

Question #51

What command would you use to check if CoreXL is enabled?

A. fw ctl affinity -1

B. fw ctl pstat

C. cpconfig

D. fw ctl multik stat

Discussion 0

Correct Answer: D Vote an answer

Question #52

Your cluster member is showing a state of "Ready". Which of the following is NOT a reason one would expect for this behaviour?

A. CoreXL is configured differently on the two machines

B. One cluster member is configured for 32 bit and the other is configured for 64 bit

C. The firewall that is showing "Ready" has been upgraded but the other firewall has not yet been upgraded

D. Firewall policy has not yet been installed to the firewall

Discussion 0

Correct Answer: D Vote an answer

Question #53

Which command will NOT display information related to memory usage?

A. memoryinfo.conf

B. cat /proc/meminfo

C. free

D. fw ctl pstat

Discussion 0

Correct Answer: A Vote an answer

Question #54

What would be considered Best Practice to determine which IPS protections you can safely disable for your environment?

A. Work through turning on each protection to see which signatures get alerts.

B. You should use vulnerability tools to perform an assessment of your environment.

C. You should set all protections to "Detect".

D. You should not disable any IPS protections.

Discussion 0

Correct Answer: B Vote an answer

Question #55

Remote VPN clients can initiate connections with internal hosts, but internal hosts are unable to initiate connections with the remote VPN clients, even though the policy is configured to allow it. You think that this is caused by NAT. What command can you run to see if NAT is occurring on a packet?

A. fw tab -t fwx_alloc -x

B. fwaccel stats misp

C. fw ctl debug -m fw + conn drop packet xlate xltrc nat

D. fw ctl pstat

Discussion 0

Correct Answer: C Vote an answer

Question #56

Which command displays compression/decompression statistics?

A. vpn compreset

B. vpn compstat

C. vpn ver -k

D. vpn crlview

Discussion 0

Correct Answer: B Vote an answer

Download Free CheckPoint 156-115.77 Demo

Simply submit your e-mail address below to get started with our free demo of your CheckPoint 156-115.77 exam.