Check Point 156-915.77 Check Point Certified Security Expert Update Blade Online Training
Check Point 156-915.77 Online Training
The questions for 156-915.77 were last updated at Aug 19,2025.
- Exam Code: 156-915.77
- Exam Name: Check Point Certified Security Expert Update Blade
- Certification Provider: Check Point
- Latest update: Aug 19,2025
Which Check Point product implements a Consolidation Policy?
- A . Smart Reporter
- B . Smart View Monitor
- C . Smart LSM
- D . Smart View Tracker
You have selected the event Port Scan from Internal Network in Smart Event, to detect an event when 30 port scans have occurred within 60 seconds. You also want to detect two port scans from a host within 10 seconds of each other.
How would you accomplish this?
- A . Define the two port-scan detections as an exception.
- B . Select the two port-scan detections as a new event.
- C . Select the two port-scan detections as a sub-event.
- D . You cannot set Smart Event to detect two port scans from a host within 10 seconds of each other.
When do modifications to the Event Policy take effect?
- A . When saved on the Correlation Units, and pushed as a policy.
- B . As soon as the Policy Tab window is closed.
- C . When saved on the Smart Event Client, and installed on the Smart Event Server.
- D . When saved on the Smart Event Server and installed to the Correlation Units.
To back up all events stored in the Smart Event Server, you should back up the contents of which folder (s)?
- A . $RTDIR/distrib
- B . $RTDIR/distrib_db and $FWDIR/events
- C . $RTDIR/distrib and $RTDIR/events_db
- D . $RTDIR/events_db
To clean the system of all events, you should delete the files in which folder(s)?
- A . $RTDIR/distrib and $RTDIR/events_db
- B . $RTDIR/events_db
- C . $FWDIR/distrib_db and $FWDIR/events
- D . $FWDIR/distrib
What Smart Console application allows you to change the Log Consolidation Policy?
- A . Smart Dashboard
- B . Smart Reporter
- C . Smart Update
- D . Smart Event Server
Where is it necessary to configure historical records in Smart View Monitor to generate Express reports in Smart Reporter?
- A . In Smart View Monitor, under Global Properties > Log and Masters
- B . In Smart Reporter, under Express > Network Activity
- C . In Smart Dashboard, the Smart View Monitor page in the R76 Security Gateway object
- D . In Smart Reporter, under Standard > Custom
In a UNIX environment, Smart Reporter Data Base settings could be modified in:
- A . $FWDIR/Eventia/conf/ini.C
- B . $RTDIR/Database/conf/my.cnf
- C . $CPDIR/Database/conf/conf.C
- D . $ERDIR/conf/my.cnf
In a Windows environment, Smart Reporter Data Base settings could be modified in:
- A . %RTDIR%Databaseconfmy.ini
- B . $ERDIR/conf/my.cnf
- C . $CPDIR/Database/conf/conf.C
- D . $FWDIR/Eventia/conf/ini.C
Which specific R76 GUI would you use to view the length of time a TCP connection was open?
- A . Smart View Tracker
- B . Smart View Status
- C . Smart Reporter
- D . Smart View Monitor