Check Point Certified Security Master

Here you have the best Checkpoint 156-115.77 practice exam questions

You have 46 total questions to study from
Each page has 5 questions, making a total of 10 pages
You can navigate through the pages using the buttons at the bottom
This questions were last updated on December 13, 2025
This site is not affiliated with or endorsed by Checkpoint.

Question 1 of 46

When troubleshooting a VPN site-to-site to a peer, it may be necessary to "down" the tunnel. What is the best method to remove ONLY the tunnel to this peer?

Change the vpn tunnel sharing parameters to force the tunnel down.

Reboot your gateway.

Remove the peer from the community and install policy.

Delete the IKE and IPsec Security Associations using the command vpn tu.

Correct Answer: D

Question 2 of 46

In Check Point, Domain-based VPN's take precedence over route-based VPN. If implementing a route-based VPN, what is one configuration step you must make on the gateway object taking part in the route-based VPN?

You should remove the gateway from all communities.

Check Point does not support route-based VPN's.

You need to create a new simple group with no objects in it and apply this as the VPN domain under that gateway's topology tab.

You should check the "Use route-based VPN" checkbox in the community properties.

Correct Answer: C

Question 3 of 46

What utility would you use to configure route-based VPNs?

vpn sw_topology

vpn shell

vpn set_slim_server

vpn tu

Correct Answer: B

Question 4 of 46

Where do you configure the file user.def to change the encryption domain of the Security Gateway?

Management Server

Endpoint Client

Security Gateway

interoperable device

Correct Answer: A

Question 5 of 46

Henry is attempting to verify VPN connectivity between two hosts, x and y. Of the following commands, which could be BEST used to verify connectivity of this
VPN?

[Expert@HostName]# fw monitor -e "((src=x.x.x.x , dst=y.y.y.y) or (src=y.y.y.y, dst=x.x.x.x)), accept;" x-o /var/log/fw_mon.cap

[Expert@HostName]# fw monitor -e "host(x.x.x.x) and host(y.y.y.y), accept;" -o /var/log/fw_mon.capw monitor -e "accept;" -o /var/log/fw_mon.cap

[Expert@HostName]# fw monitor -e "(ip_p=X) or (ip_p=Y, port(Z)), accept;" -o /var/log/fw_mon.cap

[Expert@HostName]# fw monitor -e "ip_p=X, accept;" -o /var/log/fw_mon.cap

Correct Answer: A