최신 156-215.81 무료덤프 - CheckPoint Check Point Certified Security Administrator R81

문제1

True or False: In a Distributed Environment, a Central License can be installed via CLI on a Security Gateway

A. False, Central License are installed via Gaia on Security Gateways

B. False, Central License are handled via Security Management Server

C. True, CLI is the prefer method for Licensing

D. True, Central License can be installed with CPLIC command on a Security Gateway

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제2

If there is an Accept Implied Policy set to "First", what is the reason Jorge cannot see any logs?

A. Log Implied Rule was not set correctly on the track column on the rules base.

B. Log Implied Rule was not selected on Global Properties.

C. Track log column is set to Log instead of Full Log.

D. Track log column is set to none.

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제3

Is it possible to have more than one administrator connected to a Security Management Server at once?

A. Yes, but only if all connected administrators connect with read-only permissions.

B. No, only one administrator at a time can connect to a Security Management Server

C. Yes, but only one of those administrators will have write-permissions. All others will have read-only permission.

D. Yes, but objects edited by one administrator will be locked for editing by others until the session is published.

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제4

What are valid authentication methods for mutual authenticating the VPN gateways?

A. Pre-Shared Secrets and Kerberos Ticket

B. Pre-shared Secret and PKI Certificates

C. PKI Certificates and Kerberos Tickets

D. PKI Certificates and DynamiciD OTP

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제5

The purpose of the Communication Initialization process is to establish a trust between the Security Management Server and the Check Point gateways. Which statement best describes this Secure Internal Communication (SIC)?

A. New firewalls can easily establish the trust by using the expert password defined on the SMS and the SMS IP address.

B. A SIC certificate is automatically generated on the gateway because the gateway hosts a subordinate CA to the SMS ICA.

C. After successful initialization, the gateway can communicate with any Check Point node that possesses a SIC certificate signed by the same ICA.

D. Secure Internal Communications authenticates the security gateway to the SMS before http communications are allowed.

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제6

Tom has connected to the Management Server remotely using SmartConsole and is in the process of making some Rule Base changes, when he suddenly loses connectivity. Connectivity is restored shortly afterward.
What will happen to the changes already made?

A. Tom's changes will be lost since he lost connectivity and he will have to start again.

B. Tom will have to reboot his SmartConsole computer, clear the cache, and restore changes.

C. Tom will have to reboot his SmartConsole computer, and access the Management cache store on that computer, which is only accessible after a reboot.

D. Tom's changes will have been stored on the Management when he reconnects and he will not lose any of his work.

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제7

Which one of the following is a way that the objects can be manipulated using the new API integration in R80 Management?

A. Microsoft Publisher

B. Microsoft Word

C. JSON

D. RC4 Encryption

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제8

Which command is used to add users to or from existing roles?

A. add rba user <User Name>

B. add user <User Name>

C. add rba user <User Name> roles <List>

D. add user <User Name> roles <List>

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제9

When dealing with rule base layers, what two layer types can be utilized?

A. Inbound Layers and Outbound Layers

B. R81.10 does not support Layers

C. Ordered Layers and Inline Layers

D. Structured Layers and Overlap Layers

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제10

What is the purpose of Captive Portal?

A. It provides remote access to SmartConsole

B. It authenticates users, allowing them access to the Gaia OS

C. It authenticates users, allowing them access to the Internet and corporate resources

D. It manages user permission in SmartConsole

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제11

Which of the following describes how Threat Extraction functions?

A. Delivers PDF versions of original files with active content removed

B. Delivers file with original content

C. Proactively detects threats

D. Detect threats and provides a detailed report of discovered threats

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제12

Which one of the following is the preferred licensing model? Select the BEST answer

A. Local licensing because it ties the package license to the IP-address of the gateway and has no dependency of the Security Management Server.

B. Local licensing because it ties the package license to the MAC-address of the gateway management interface and has no Security Management Server dependency.

C. Central licensing because it ties the package license to the IP-address of the Security Management Server and has no dependency on the gateway.

D. Central licensing because it ties the package license to the MAC-address of the Security Management Server's Mgmt-interface and has no dependency on the gateway.

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제13

Which Check Point Software Wade provides visibility of users, groups and machines while also providing access control through identity-based policies?

A. Application Control

B. URL Filtering

C. Firewall

D. Identity Awareness

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제14

Secure Internal Communication (SIC) is handled by what process?

A. FWD

B. CPD

C. HTTPS

D. CPM

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제15

What type of NAT is a one-to-one relationship where each host is translated to a unique address?

A. Static

B. Destination

C. Source

D. Hide

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제16

In which scenario is it a valid option to transfer a license from one hardware device to another?

A. From an IBM Open Server to an HP Open Server

B. From a 4400 Appliance to an HP Open Server

C. From an IBM Open Server to a 2200 Appliance

D. From a 4400 Appliance to a 2200 Appliance

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제17

View the rule below. What does the pen-symbol in the left column mean?

A. Another user has currently locked the rules for editing.

B. Those rules have been published in the current session.

C. Rules have been edited by the logged in administrator, but the policy has not been published yet.

D. The configuration lock is present. Click the pen symbol in order to gain the lock.

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제18

Which is a suitable command to check whether Drop Templates are activated or not?

A. fwaccel stats

B. fw ctl templates -d

C. fwaccel stat

D. fw ctl get int activate_drop_templates

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제19

AdminA and AdminB are both logged in on SmartConsole What does it mean if AdmmB sees a lock icon on a rule? Choose the BEST answer.

A. Rule is locked by AdminA because the rule is currently being edited

B. Rule is locked by AdminA and will be made available if the session is published

C. Rule is locked by AdminA because the save button has not been pressed

D. Rule is locked by AdminA and if the session is saved, the rule will be made available

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제20

Which icon in the WebUI indicates that read/write access is enabled?

A. Pencil

B. Book

C. Padlock

D. Eyeglasses

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

최신 156-215.81 무료덤프 - CheckPoint Check Point Certified Security Administrator R81

우리와 연락하기

유용한 링크

최신 업데이트