Check Point Certified Security Master

Here you have the best Checkpoint 156-115.77 practice exam questions

You have 46 total questions to study from
Each page has 5 questions, making a total of 10 pages
You can navigate through the pages using the buttons at the bottom
This questions were last updated on October 29, 2025
This site is not affiliated with or endorsed by Checkpoint.

Question 1 of 46

When troubleshooting a VPN site-to-site to a peer, it may be necessary to "down" the tunnel. What is the best method to remove ONLY the tunnel to this peer?

Change the vpn tunnel sharing parameters to force the tunnel down.

Reboot your gateway.

Remove the peer from the community and install policy.

Delete the IKE and IPsec Security Associations using the command vpn tu.

Correct Answer: D

Question 2 of 46

Henry is attempting to verify VPN connectivity between two hosts, x and y. Of the following commands, which could be BEST used to verify connectivity of this
VPN?

[Expert@HostName]# fw monitor -e "((src=x.x.x.x , dst=y.y.y.y) or (src=y.y.y.y, dst=x.x.x.x)), accept;" x-o /var/log/fw_mon.cap

[Expert@HostName]# fw monitor -e "host(x.x.x.x) and host(y.y.y.y), accept;" -o /var/log/fw_mon.capw monitor -e "accept;" -o /var/log/fw_mon.cap

[Expert@HostName]# fw monitor -e "(ip_p=X) or (ip_p=Y, port(Z)), accept;" -o /var/log/fw_mon.cap

[Expert@HostName]# fw monitor -e "ip_p=X, accept;" -o /var/log/fw_mon.cap

Correct Answer: A

Question 3 of 46

Which technology is not supported with route-based VPNs?

Unnumbered VTI

Numbered VTI

IKEv2

OSPF

Correct Answer: C

Question 4 of 46

Which feature is not supported with unnumbered VTI?

Proxy interfaces

High availability

Policy based routing

Anti-spoofing

Correct Answer: D

Question 5 of 46

In the gateway object, under topology you select the "Get All Members Interfaces with Topology" option and your newly configured unnumbered VTIs are not populated. Why is this information missing?

VTI information on unnumbered interfaces should appear, so there is an issue with your configuration.

VTI information on unnumbered interfaces is not required information for the VPN to work.

VTI information on unnumbered interfaces needs to be entered manually.

In order to fetch VTI information on unnumbered interfaces you must add an explicit rule to the policy.

Correct Answer: C