Paul has just joined the MegaCorp security administration team. Natalie, the administrator, creates
a new administrator account for Paul in SmartDashboard and installs the policy. When Paul tries
to login it fails. How can Natalie verify whether Paul’s IP address is predefined on the security
management server?
A.
Login to Smart Dashboard, access Properties of the SMS, and verify whether Paul’s IP address
is listed.
B.
Type cpconfig on the Management Server and select the option “GUI client List” to see if Paul’s
IP address is listed.
C.
Login in to Smart Dashboard, access Global Properties, and select Security Management, to
verify whether Paul’s IP address is listed.
D.
Access the WEBUI on the Security Gateway, and verify whether Paul’s IP address is listed as a
GUI client.
D
It can’t be D – because states ‘Access the WEBUI on the Security Gateway’, and a Security Gateway doesn’t have a GUI clients list, only Security Management, so it’s B.
Tim is a troll be careful.
You can’t run cpconfig on the mgmt. server – that command does not work on the mgmt. server the correct command would be mdsconfig – therefore it cannot be ‘B’ . The correct answer is A
cpconfig on the smart management server can be used.. Please check the following guide.
https://sc1.checkpoint.com/documents/R77/CP_R77_Gaia_AdminWebAdminGuide/80898.htm#o12499
The title of that document is Security Management Server AND FIREWALL COMMANDS…CPCONFIG is a Firewall command. Try it – login to your SMS and try to run CPCONFIG, post the output that you get.
You can you CPCONFIG to enable ClusterXL – Why would you enable ClusterXL on your SMS?
sk12120:
Solution
This solution addresses the following situations:
1.GUI client is not properly registered under cpconfig (in Security Management server).
2.TCP 18190 is blocked/filtered between the GUI client and Security Management server.
3.The Security Management Server is blocking GUI client connections.
4.Database corruption from filled up disk space in /var/log
=> so cpconfig exist in security management server
cpconfig offers different options on different systems.
(GUI doesn’t mean GAiA WebUI)
GUI means SmartConsole (SmartDashboard a.s.o.), SmartConsole works with the SMS, not with the Gateway.
I just looked for that:
On a Gateway there is no “Gui Clients” setting, neither in cpconfig nor in the GAiA WebUI.
But it is in both on a SMS.
B)
Explanation:
[Expert@gw]# cpconfig
This program will let you re-configure
your Check Point products configuration.
Configuration Options:
———————-
(1) Licenses and contracts
(2) Administrator
(3) GUI Clients <—– …. [/su_spoiler
answer is B indeed.
Had to do that numerous times.
It’s B 🙂
Since they are concerned on SmartDashboard access so it should be via the Security Mgmt. Server
so ‘cpconfig’ in SMS
The GAiA Web UI is a viable choice as well BUT what gave it away is accessing it via the Security Gateway. It SHOULD be on the GAiA Web UI in SMS
IN short two possible scenarios you can verify this:
‘cpconfig’ in SMS –in choices
OR GAiA Web UI in SMS –Not in choices
B. Type cpconfig on the Management Server and select the option “GUI client List” to see if Paul’s IP address is listed.
Wrote 156-315.77 last Friday, and passed with 95%!
There were 89 questions of my 156-315.77 exam, many Fill in the Blank questions.
Around 10-15 new questions (IPS, Threat Prevention FW Monitor, VPN Tunnel Sharing, GAiA…etc.).
Be careful of questions on Command and Syntax, GAiA Command.
I used the PassLeader 156-315.77 dumps (http://www.passleader.com/156-315-77.html) (752q VCE and PDF dumps) for preparing for exam, all NEW questions were from it, the most valid 156-315.77 dumps!
What’s more:
PassLeader has published part of its 156-315.77 dumps on Google Drive for free here:
https://drive.google.com/open?id=0B-ob6L_QjGLpMm1FNVVkSEZZR3c
Good Luck!!!
B. Type cpconfig on the Management Server and select the option “GUI client List” to see if Paul’s IP address is listed.