최신 156-315.81 무료덤프 - CheckPoint Check Point Certified Security Expert R81

문제1

What is the order of NAT priorities?

A. Static NAT, hide NAT, IP pool NAT

B. IP pool NAT, static NAT, hide NAT

C. Static NAT, IP pool NAT, hide NAT

D. Static NAT, automatic NAT, hide NAT

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제2

What is the benefit of "tw monitor" over "tcpdump"?

A. "fw monitor" can be used from the CLI of the Management Server to collect information from multiple gateways.

B. "fw monitor" is also available for 64-Bit operating systems.

C. With "fw monitor", you can see the inspection points, which cannot be seen in "tcpdump"

D. "fw monitor" reveals Layer 2 information, while "tcpdump" acts at Layer 3.

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제3

You need to change the MAC-address on eth2 interface of the gateway. What command and what mode will you use to achieve this goal?

A. set interface eth2 hw-addr 11:11:11:11:11:11; CLISH

B. set interface eth2 mac-addr 11:11:11:11:11:11; CLISH

C. ifconfig eth1 hw 11:11:11:11:11:11; expert

D. ethtool -i eth2 mac 11:11:11:11:11:11; expert

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제4

What command is used to manually failover a Multi-Version Cluster during the upgrade?

A. set cluster member state down in Clish

B. clusterXL_admin down in Clish

C. set cluster down in Expert Mode

D. clusterXL_admin down in Expert Mode

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제5

The Check Point installation history feature in provides the following:

A. Policy Installation Date only

B. Policy Installation Date, view install changes and install specific version

C. View install changes and install specific version

D. View install changes

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제6

Which GUI client is supported in R81?

A. SmartLog

B. SmartProvisioning

C. SmartView Monitor

D. SmartView Tracker

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제7

You have used the "set inactivity-timeout 120" command to prevent the session to be disconnected after 10 minutes of inactivity. However, the Web session is being disconnected after 10 minutes. Why?

A. Probably, you have forgotten to make sure that nobody is accessing the management server via the SmartConsole which locks the management database.

B. The number of minutes is correct. Probably, you have forgotten to save this setting with the "save config" command.

C. The number specified is the amount of the idle timeout in seconds rather than in minutes. So you have to use the command "set inactivity-timeout 600" instead.

D. The idle timeout for the web session is specified with the "set web session-timeout" command.

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제8

You need to change the number of firewall Instances used by CoreXL. How can you achieve this goal?

A. edit fwaffinity.conf; reboot required

B. edit fwaffinity.conf; reboot not required

C. cpconfig; reboot required

D. cpconfig; reboot not required

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제9

How many versions, besides the destination version, are supported in a Multi-Version Cluster Upgrade?

A. 4

B. 1

C. 3

D. 2

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제10

In which deployment is the security management server and Security Gateway installed on the same appliance?

A. Standalone

B. Distributed

C. Remote

D. Bridge Mode

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제11

Which command shows the current Security Gateway Firewall chain?

A. fw ctl firewall-chain

B. show firewall chain

C. show current chain

D. fw ctl chain

정답: D

문제12

What is true about the IPS-Blade?

A. In R81, IPS is managed by the Threat Prevention Policy

B. In R81, in the IPS Layer, the only three possible actions are Basic, Optimized and Strict

C. In R81, IPS Exceptions cannot be attached to "all rules"

D. In R81, the GeoPolicy Exceptions and the Threat Prevention Exceptions are the same

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제13

You pushed a policy to your gateway and you cannot access the gateway remotely any more. What command should you use to remove the policy from the gateway by logging in through console access?

A. "fw cpstop"

B. "fw unloadlocal"

C. "fwundo"

D. "fw unloadpolicy''

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제14

Selecting an event displays its configurable properties in the Detail pane and a description of the event in the Description pane. Which is NOT an option to adjust or configure?

A. Policy

B. Severity

C. Threshold

D. Automatic reactions

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제15

What are the correct sleps upgrading a HA cluster (Ml is active. M2 is passive) using Multi-Version Cluster(MVC) Upgrade?

A. 1) Upgrade the passive node M2 to R81.20
2) Enable the MVC mechanism on the upgraded R81.20 Cluster Member M2 ttcphaconf mvc on
3) In SmartConsole, change the version of the cluster object 4} Install the Access Control Policy
5) After examine the cluster states upgrade node M1 to R81.20
6) On each Cluster Member, disable the MVC mechanism and Install the Access Control Policy upgrade the passive node M2 to R81.20

B. 1) In SmartConsole. change the version of the cluster object
2) Upgrade the passive node M2 to R81.20
3) Enable the MVC mechanism on the upgraded R81.20 Cluster Member M2 Wcphaconf mvc on
4) Install the Access Control Policy and make sure that the installation will not stop if installation on one cluster member fails
5) After examine the cluster states upgrade node M1 to R81.20
6) On each Cluster Member, disable the MVC mechanism and Install the Access Control Policy SmartConsole. change the version of the cluster object

C. 1) Enable the MVC mechanism on both cluster members «cphaprob mvc on
2) Upgrade the passive node M2 to R81.20
3) In SmartConsole. change the version of the cluster object
4) Install the Access Control Policy and make sure that the installation will not stop if installation on one cluster member fails
5) After examine the cluster states upgrade node M1 to R81.20
6) On each Cluster Member, disable the MVC mechanism

D. 1) Enable the MVC mechanism on both cluster members #cphaprob mvc on
2) Upgrade the passive node M2 to R81.20
3) In SmartConsole. change the version of the cluster object
4) Install the Access Control Policy
5) After examine the cluster states upgrade node M1 to R81.20
6) On each Cluster Member, disable the MVC mechanism and Install the Access Control Policy

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제16

What scenario indicates that SecureXL is enabled?

A. SecureXL can be disabled in cpconfig

B. Dynamic objects are available in the Object Explorer

C. Only one packet in a stream is seen in a fw monitor packet capture

D. fwaccel commands can be used in clish

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제17

If you needed the Multicast MAC address of a cluster, what command would you run?

A. cphaprob -a if

B. cphaconf ccp multicast

C. cphaprob igmp

D. cphaconf debug data

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제18

Check Point Support in many cases asks you for a configuration summary of your Check Point system. This is also called:

A. cpexport

B. cpinfo

C. cpsizeme

D. sysinfo

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

최신 156-315.81 무료덤프 - CheckPoint Check Point Certified Security Expert R81

우리와 연락하기

유용한 링크

최신 업데이트