Free CheckPoint 156-115.77 Practice Test & Real Exam Questions

Exam Code/Number: 156-115.77
Exam Name/Title: Check Point Certified Security Master
Certification Provider: CheckPoint
Corresponding Certification: CCSM

Exam Questions: 295
Updated On: Sep 02, 2026

Question #1

Why would you choose to combine dynamic routing protocols and VPNs?

A. The VPN device can be automatically updated with network changes on any VPN peer Gateway without the need to update the VPN Domain's configuration.

B. All options listed.

C. Dynamic-routing information can propagate over the VPN, utilizing the VPN as just another point-to-point link in the network.

D. In the case of one tunnel failure, other tunnels may be used to route the traffic.

Discussion 0

Correct Answer: B Vote an answer

Question #2

You have just taken over as a firewall administrator. Your company is using Geo Protections on your gateway, but you want to verify that the protections are up-to-date. How can you see when these were updated?

A. Check asm_update_version_geo in GuiDBedit.

B. Check the time stamp of $FWDIR/tmp/geo_location_tmp/updates/IpToCountry.csv.

C. In the IPS tree Protections > Select Check for Update.

D. In the IPS tree Protections > Geo Protections and check the profile name which is mm/dd/yy.

Discussion 0

Correct Answer: B Vote an answer

Question #3

In the policy below, which rule disables SecureXL?

A. 4

B. 1

C. 3

D. 5

Discussion 0

Correct Answer: B Vote an answer

Question #4

ACME Corp has a cluster consisting of two 13500 appliances. As the Firewall Administrator, you notice that on an output of top, you are seeing high CPU usage of the cores assigned as SNDs, but low CPU usage on cores assigned to individual fw_worker_X processes. What command should you run next to performance tune your cluster?

A. fw tab -t connections -s - this will show you a summary of your connections table, and allow you to determine whether there is too much traffic traversing your firewall.

B. fwaccel stats -s - this will show you the acceleration profile of your connections and potentially why your SNDs are running high while other cores are running low.

C. fwaccel off - this will turn off SecureXL, which is causing your SNDs to be running high in the first place.

D. fw ctl debug -m cluster + all - this will show you all the connections being processed by ClusterXL and explain the high CPU usage on your appliance.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #5

Your ARP cache is overflowing negatively impacting users experience on your network. Which command can you issue to increase the ARP cache on the fly? You do not need this to survive reboot.

A. echo 1024 > /proc/sys/net/ipv4/neigh/default/gc_thresh3

B. arp cache table > 1024

C. You cannot increase the size of the ARP cache on the fly.

D. Modify the /etc/sysctl.conf: net.ipv4.neigh.default.gc_thresh3 = 1024.

Discussion 0

Correct Answer: A Vote an answer

Question #6

You are in VPN troubleshooting with a Partner and you suspect a mismatch configuration in Diffie-Hellman (DH) group to Phase1. After starting a vpn debug, in which packet would you look to analyze this option in your debug file?

A. Packet1

B. Packet5

C. Packet3

D. Packet4

Discussion 0

Correct Answer: A Vote an answer

Question #7

You are using an IPV6 environment and find that you need additional access control and want to set up some directional VPN rules. How can you restrict access based on destination?

A. Directional VPN enforcement feature is not supported for IPv6.

B. Enable Global Properties > Advanced > IPv6 for directional VPN enforcement.

C. Set your rule match to "All_gwtogw" and create a new rule.

D. This can only be done in Traditional Mode VPN.

Discussion 0

Correct Answer: A Vote an answer

Question #8

You are configuring dynamic routing on Secure Platform, as the administrator you run the command pro enable and reboot. You are confident that your configuration has been done correctly. When you check, you find the dynamic routing daemon has not started. What is the likely cause of this issue?

A. Secure Platform does not support dynamic routing.

B. You must push the policy after your reboot.

C. You need to apply the license and push the policy.

D. Dynamic routing needs to be enabled in cpconfig.

Discussion 0

Correct Answer: C Vote an answer

Question #9

Where would you find CPU information like model, number of cores, vendor and architecture?

A. WebUI

B. sysconfig

C. Right click the gateway object in Smart Dashboard and view properties

D. In the file cpuinfo in the directory /proc.

Discussion 0

Correct Answer: D Vote an answer

Question #10

From a Best Practices perspective, what percentage of your packets should be accelerated?

A. 100%

B. 65%

C. 90%

D. 75%

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #11

Each connection allowed by a Security Gateway, will have a real entry and some symbolic link entries in the connections state table. The symbolic link entries point back to the real entry using this:

A. serial number of the real entry.

B. 6-tuple.

C. memory pointer.

D. date and time of the connection establishment.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #12

Consider the following Rule Base; What can be concluded in regards to SecureXL Accept Templates?

Checkpoint 156-115.77 Exam

A. Accept Templates will be disabled on Rule #6

B. Accept Templates will be disabled on Rule #4

C. Accept Templates do not function with VPN communities in the Rule Base

D. Accept Templates will be fully functional

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #13

What is the best way to see how a firewall is performing while processing packets in the firewall path, including resource usage?

A. fwaccel stats

B. fw getperf

C. fw ctl pstat

D. SecureXL stat

Discussion 0

Correct Answer: C Vote an answer

Download Free CheckPoint 156-115.77 Demo

Simply submit your e-mail address below to get started with our free demo of your CheckPoint 156-115.77 exam.