CheckPoint 156-915.77 Actual Free Exam Questions & Community Discussion

Exam Code/Number: 156-915.77
Exam Name/Title: Check Point Certified Security Expert Update Blade
Certification Provider: CheckPoint
Corresponding Certification: CheckPoint Certification

Exam Questions: 850
Updated On: Sep 15, 2026

Question #1

What is the lowest possible version a Security Gateway may be running in order to use it as an LSM enabled Gateway?

A. NGX R60

B. NG-AI R55 HFAJ7

C. NGXR65HFA_50

D. NGX R71

Discussion 0

Correct Answer: B Vote an answer

Question #2

You are preparing to configure your VoIP Domain Gatekeeper object. Which two other objects should you have created first?

A. An object to represent the call manager, AND an object to represent the host on which the transmission router is installed

B. An object to represent the IP phone network, AND an object to represent the host on which the gatekeeper is installed

C. An object to represent the IP phone network, AND an object to represent the host on which the proxy is installed

D. An object to represent the Q.931 service origination host, AND an object to represent the H.245 termination host

E. An object to represent the PSTN phone network, AND an object to represent the IP phone network

Discussion 0

Correct Answer: B Vote an answer

Question #3

You must set up SIP with a proxy for your network. IP phones are in the 172.16.100.0 network. The Registrar and proxy are installed on host 172.16.100.100. To allow handover enforcement for outbound calls from SIP-net to network Net_B on the Internet, you have defined the following objects:
Network object: SIP-net: 172.16.100.0/24
SIP-gateway: 172.16.100.100
VoIP Domain object: VolP_domain_A
1. End point domain: SIP-net
2.VoIP gateway installed at: SIP-gateway host object
How would you configure the rule?

A. SIP- G ateway/N et_B/s i p_a ny/a c c e pt

B. VolP_domain_A/Net_B/sip_any, and sip/accept

C. SIP-Gateway/Net_B/sip/accept

D. VolP_Gateway_MJet_B/sip_any/accept

E. VolP_domain_A/Net_B/sip/accept

Discussion 0

Correct Answer: E Vote an answer

Question #4

CORRECT TEXT
Fill in the blank with a numeric value. The default port number for standard TCP connections with the LDAP server is

Discussion 0

Correct Answer:

389

Question #5

When you add a resource service to a rule, which ONE of the following actions occur?

A. All packets that match the resource in the rule will be dropped.

B. All packets matching the resource service rule are analyzed or authenticated, based on the resource properties.

C. Users attempting to connect to the destination of the rule will be required to authenticate.

D. VPN-1 Secure Client users attempting to connect to the object defined in the Destination column of the rule will receive a new Desktop Policy from the resource.

E. All packets matching that rule are either encrypted or decrypted by the defined resource.

Discussion 0

Correct Answer: B Vote an answer

Question #6

If Jack was concerned about the number of log entries he would receive in the SmartReporter system, which policy would he need to modify?

A. Log Consolidator Policy

B. Log Sequence Policy

C. Report Policy

D. Consolidation Policy

Discussion 0

Correct Answer: D Vote an answer

Question #7

Your primary Security Management Server runs on GAiA. What is the fastest way to back up your Security Gateway R76 configuration, including routing and network configuration files?

A. Using the commandupgrade export.

B. Use the command snapshot.

C. Copying the directories $FWDIR/conf and $FWDIR/lib to another location.

D. Using the native GAiA back up utility from command line or in the Web-based user interface.

Discussion 0

Correct Answer: D Vote an answer

Question #8

You have three servers located in a DMZ, using private IP addresses. You want internal users from 10.10.10.x to access the DMZ servers by public IP addresses. Internal_net
10.10.10.x is configured for Hide NAT behind the Security Gateway's external interface.

What is the best configuration for 10.10.10.x users to access the DMZ servers, using the DMZ servers' public IP addresses?

A. When connecting to internal network 10.10.10.x, configure Hide NAT for the DMZ network behind the Security Gateway DMZ interface.

B. When connecting to the Internet, configure manual Static NAT rules to translate the DMZ servers.

C. When the source is the internal network 10.10.10.x, configure manual static NAT rules to translate the DMZ servers.

D. When trying to access DMZ servers, configure Hide NAT for 10.10.10.x behind the DMZ's interface.

Discussion 0

Correct Answer: C Vote an answer

Question #9

To configure a client to properly log in to the user portal using a certificate, the Administrator MUST:

A. Install an R71 internal Certificate Authority certificate.

B. Create an internal user in the admin portal.

C. Create a client certificate from Smart Dashboard.

D. Store the client certificate on the SSL VPN Gateway.

Discussion 0

Correct Answer: B Vote an answer

Question #10

When an Endpoint user is able to authenticate but receives a message from the client that it is unable to enforce the desktop policy, what is the most likely scenario?

A. The user is attempting to connect with the wrong Endpoint client.

B. A Desktop Policy is not configured.

C. The gateway could not locate the user in Smart Directory and is allowing the connection with limitations based on a generic profile.

D. The user's rights prevent access to the protected network.

Discussion 0

Correct Answer: A Vote an answer

Question #11

Which of the following is the default port for Management Portal?

A. 4434

B. 443

C. 4433

D. 444

Discussion 0

Correct Answer: C Vote an answer

Question #12

If Smart Workflow is configured to work without Sessions or Role Segregation, how does the Smart Dashboard function?

A. All functions of Smart Workflow will be available on a per rule basis.

B. The Smart Dashboard functions as if Smart Workflow is not enabled but an automatic session exists in the background and full Smart View tracker and audit trail functionality will be available.

C. The Smart Dashboard will function without Smart Workflow, with no session and no audit trail functionality.

D. The Smart Dashboard will have no session but Smart View Tracker and audit trail will be available.

Discussion 0

Correct Answer: B Vote an answer

Question #13

Which command line interface utility allows the administrator to verify the Security Policy name and timestamp currently installed on a firewall module?

A. cpstat fwd

B. fw ver

C. fw ctl pstat

D. fw stat

Discussion 0

Correct Answer: D Vote an answer

Question #14

How does a standby SmartCenter Server receive logs from all Security Gateways, when an active SmartCenter Server fails over?

A. Establish Secure Internal Communications (SIC) between the primary and secondary Servers. The secondary Server can then receive logs from the Gateways, when the active Server fails over.

B. Create a Check Point host object to represent the standby SmartCenter Server. Then select "Secondary SmartCenter Server" and Log Server", from the list of Check Point Products on the General properties screen.

C. The remote Gateways must set up SIC with the secondary SmartCenter Server, for logging.

D. The secondary Server's host name and IP address must be added to the Masters file, on the remote Gateways.

E. On the Log Servers screen (from the Logs and Masters tree on the gateway object's General Properties screen), add the secondary SmartCenter Server object as the additional log server. Reinstall the Security Policy.

Discussion 0

Correct Answer: E Vote an answer

Download Free CheckPoint 156-915.77 Demo

Simply submit your e-mail address below to get started with our free demo of your CheckPoint 156-915.77 exam.