최신 156-315.80 무료덤프 - CheckPoint Check Point Certified Security Expert

문제1

Which Check Point daemon invokes and monitors critical processes and attempts to restart them if they fail?

A. cpwd

B. cpm

C. cpd

D. fwm

정답: A

문제2

From SecureXL perspective, what are the tree paths of traffic flow:

A. Initial Path; Medium Path; Accelerated Path

B. Firewall Path; Accelerated Path; Medium Path

C. Firewall Path; Accept Path; Drop Path

D. Layer Path; Blade Path; Rule Path

정답: B

문제3

SmartEvent has several components that function together to track security threats. What is the function of the Correlation Unit as a component of this architecture?

A. Analyzes each log entry as it arrives at the log server according to the Event Policy. When a threat pattern is identified, an event is forwarded to the SmartEvent Server.

B. Collects syslog data from third party devices and saves them to the database.

C. Correlates all the identified threats with the consolidation policy.

D. Connects with the SmartEvent Client when generating threat reports.

정답: A

문제4

To find records in the logs that shows log records from the Application & URL Filtering Software Blade where traffic was dropped, what would be the query syntax?

A. blade."application control AND action;drop

B. (blade: application control AND action;drop)

C. blade;"application control AND action:drop

D. blada: application control AND action:drop

정답: C

문제5

What traffic does the Anti-bot feature block?

A. Network traffic to hosts that have been identified as infected

B. Network traffic that is directed to unknown or malicious servers

C. Command and Control traffic from hosts that have been identified as infected

D. Command and Control traffic to servers with reputation for hosting malware

정답: C

문제6

Pamela is Cyber Security Engineer working for Global Instance Firm with large scale deployment of Check Point Enterprise Appliances using GAiA/R80.10. Company's Developer Team is having random access issue to newly deployed Application Server in DMZ's Application Server Farm Tier and blames DMZ Security Gateway as root cause. The ticket has been created and issue is at Pamela's desk for an investigation. Pamela decides to use Check Point's Packet Analyzer Tool-fw monitor to iron out the issue during approved Maintenance window.
What do you recommend as the best suggestion for Pamela to make sure she successfully captures entire traffic in context of Firewall and problematic traffic?

A. Pamela should check SecureXL status on DMZ Security Gateway and if it's turned OFF. She should turn ON SecureXL before using fw monitor to avoid misleading traffic captures.

B. Pamela should use snoop over fw monitor tool as snoop works at NIC driver level and captures entire traffic.

C. Pamela should check SecureXL status on DMZ Security gateway and if it's turned ON. She should turn OFF SecureXL before using fw monitor to avoid misleading traffic captures.

D. Pamela should use tcpdump over fw monitor tool as tcpdump works at OS-level and captures entire traffic.

정답: C

문제7

You are the administrator for ABC Corp. You have logged into your R80 Management server. You are making some changes in the Rule Base and notice that rule No.6 has a pencil icon next to it.
What does this mean?

A. This rule No. 6 has been marked for deletion in another Management session.

B. This rule No. 6 has been marked for deletion in your Management session.

C. This rule No. 6 has been marked for editing in another Management session.

D. This rule No. 6 has been marked for editing in your Management session.

정답: D

문제8

When users connect to the Mobile Access portal they are unable to open File Shares.
Which log file would you want to examine?

A. fw.elg

B. cvpnd.elg

C. vpnd.elg

D. httpd.elg

정답: B

문제9

The fwd process on the Security Gateway sends logs to the fwd process on the Management Server via which 2 processes?

A. fwd via cpd

B. fwd via cpm

C. cpm via cpd

D. fwm via fwd

정답: B

문제10

Using ClusterXL, what statement is true about the Sticky Decision Function?

A. Is only relevant when using SecureXL

B. Is configured using cpconfig

C. Can only be changed for Load Sharing implementations

D. All connections are processed and synchronized by the pivot

정답: C

문제11

What is the most recommended way to install patches and hotfixes?

A. rpm -Uv

B. UnixinstallScript

C. Software Update Service

D. CPUSE Check Point Update Service Engine

정답: D

문제12

Which SmartConsole tab is used to monitor network and security performance?

A. Security Policies

B. Logs and Monitor

C. Manage Setting

D. Gateway and Servers

정답: B

문제13

Fill in the blank: The command ___________________ provides the most complete restoration of a R80 configuration.

A. upgrade_import

B. cpinfo -recover

C. fwm dbimport -p <export file>

D. cpconfig

정답: A

문제14

What is required for a certificate-based VPN tunnel between two gateways with separate management systems?

A. Shared Secret Passwords

B. Mutually Trusted Certificate Authorities

C. Unique Passwords

D. Shared User Certificates

정답: B

최신 156-315.80 무료덤프 - CheckPoint Check Point Certified Security Expert - R80

우리와 연락하기

유용한 링크

최신 업데이트