최신 156-315.80 무료덤프 - CheckPoint Check Point Certified Security Expert

문제1

Which feature is NOT provided by all Check Point Mobile Access solutions?

A. Secure connectivity

B. Support for IPv6

C. Granular access control

D. Strong user authentication

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제2

What is the valid range for Virtual Router Identifier (VRID) value in a Virtual Routing Redundancy Protocol (VRRP) configuration?

A. 0 - 255

B. 1-255

C. 1-254

D. 0-254

정답: B

문제3

What is the difference between SSL VPN and IPSec VPN?

A. SSL VPN requires installation of a resident VPN client.

B. IPSec VPN requires installation of a resident VPN client and SSL VPN requires only an installed Browser.

C. IPSec VPN does not require installation of a resilient VPN client.

D. SSL VPN and IPSec VPN are the same.

정답: B

문제4

Packet acceleration (SecureXL) identifies connections by several attributes- Which of the attributes is NOT used for identifying connection?

A. TCP Acknowledgment Number

B. Source Port

C. Source Address

D. Destination Address

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제5

The Correlation Unit performs all but the following actions:

A. Takes a new log entry that is part of a group of items that together make up an event, and adds it to an ongoing event.

B. Marks logs that individually are not events, but may be part of a larger pattern to be identified later.

C. Generates an event based on the Event policy.

D. Assigns a severity level to the event.

정답: D

문제6

Which of the following process pulls application monitoring status?

A. fwd

B. cpwd

C. cpd

D. fwm

정답: C

문제7

On the following picture an administrator configures Identity Awareness:

After clicking "Next" the above configuration is supported by:

A. Based on Active Directory integration which allows the Security Gateway to correlate Active Directory users and machines to IP addresses in a method that is completely transparent to the user.

B. The ports 443 or 80 what will be used by Browser-Based and configured Authentication.

C. Kerberos SSO which will be working for Active Directory integration

D. Obligatory usage of Captive Portal.

정답: A

문제8

If SecureXL is disabled which path is used to process traffic?

A. Medium path

B. Firewall path

C. Passive path

D. Accelerated path

정답: B

문제9

What is the benefit of Manual NAT over Automatic NAT?

A. You have the full control about the priority of the NAT rules

B. There is no benefit since Automatic NAT has in any case higher priority over Manual NAT

C. On IPSO and GAIA Gateways, it is handled in a stateful manner

D. If you create a new Security Policy, the Manual NAT rules will be transferred to this new policy.

정답: A

문제10

Which command gives us a perspective of the number of kernel tables?

A. fw tab -t

B. fw tab -s

C. fw tab -n

D. fw tab -k

정답: B

문제11

What is the order of NAT priorities?

A. Static NAT, hide NAT, IP pool NAT

B. IP pool NAT, static NAT, hide NAT

C. Static NAT, IP pool NAT, hide NAT

D. Static NAT, automatic NAT, hide NAT

정답: C

문제12

Due to high CPU workload on the Security Gateway, the security administrator decided to purchase a new CPU to replace the existing single core CPU. After installation, is the administrator required to perform any additional tasks?

A. Administrator does not need to perform any task. Check Point will make use of the newly installed CPU and Cores

B. Go to clash-Run cpconfig | Configure CoreXL to make use of the additional Cores | Exit cpconfig | Reboot Security Gateway | Install Security Policy

C. Go to clash-Run cpconfig | Configure CoreXL to make use of the additional Cores | Exit cpconfig | Reboot Security Gateway

D. Go to clash-Run cpstop | Run cpstart

정답: C

문제13

Ken wants to obtain a configuration lock from other administrator on R80 Security Management Server. He can do this via WebUI or via CLI.
Which command should he use in CLI? (Choose the correct answer.)

A. override database lock

B. remove database lock

C. The database feature has two commands lock database override and unlock database. Both will work.

D. The database feature has one command lock database override.

정답: C

문제14

Office mode means that:

A. Users authenticate with an Internet browser and use secure HTTPS connection.

B. SecurID client assigns a routable MAC address. After the user authenticates for a tunnel, the VPN gateway assigns a routable IP address to the remote client.

C. Local ISP (Internet service Provider) assigns a non-routable IP address to the remote user.

D. Allows a security gateway to assign a remote client an IP address. After the user authenticates for a tunnel, the VPN gateway assigns a routable IP address to the remote client.

정답: D

문제15

Sieve is a Cyber Security Engineer working for Global Bank with a large scale deployment of Check Point Enterprise Appliances Steve's manager. Diana asks him to provide firewall connection table details from one of the firewalls for which he is responsible. Which of these commands may impact performance briefly and should not be used during heavy traffic times of day?

A. fw tab -t connections

B. fw tab -t connections -f

C. fw tab -t connections -c

D. fw tab -t connections -s

정답: A

문제16

VPN Link Selection will perform the following when the primary VPN link goes down?

A. The Firewall will inform the client that the tunnel is down.

B. The Firewall can update the Link Selection entries to start using a different link for the same tunnel.

C. The Firewall will drop the packets.

D. The Firewall will send out the packet on all interfaces.

정답: B

문제17

The following command is used to verify the CPUSE version:

A. HostName:0>show installer status build

B. [Expert@HostName:0]#show installer status

C. HostName:0>show installer build

D. [Expert@HostName:0]#show installer status build

정답: A

문제18

What solution is Multi-queue intended to provide?

A. Reduce the performance of network interfaces

B. Improve the efficiency of traffic handling by SecureXL SNDs

C. Improve the efficiency of CoreXL Kernel Instances

D. Reduce the confusion for traffic capturing in FW Monitor

정답: C

문제19

When gathering information about a gateway using CPINFO, what information is included or excluded when using the "-x" parameter?

A. Includes the registry

B. Does not resolve network addresses

C. Output excludes connection table

D. Gets information about the specified Virtual System

정답: D

최신 156-315.80 무료덤프 - CheckPoint Check Point Certified Security Expert - R80

우리와 연락하기

유용한 링크

최신 업데이트