최신 156-315.81.20 무료덤프 - CheckPoint Check Point Certified Security Expert

문제1

Which command is used to display status information for various components?

A. show sysenv all

B. sysmess all

C. show all systems

D. show system messages

정답: A

문제2

Alice wants to upgrade the current security management machine from R80.40 to R81.20 and she wants to check the Deployment Agent status over the GAIA CLISH.
Which of the following GAIACLISH command is true?

A. show installer status

B. show agent status

C. show installer packages

D. show uninstaller status

정답: A

문제3

An established connection is going to www.google.com. The Application Control Blade Is inspecting the traffic.
If SecureXL and CoreXL are both enabled, which path is handling the traffic?

A. Slow Path

B. Accelerated Path

C. Fast Path

D. Medium Path

정답: B

문제4

While using the Gaia CLI. what is the correct command to publish changes to the management server?

A. json publish

B. mgmt publish

C. mgmt_cli commit

D. commit

정답: B

문제5

View the rule below.
What does the lock-symbol in the left column mean? (Choose the BEST answer.)

A. Configuration lock is present. Click the lock symbol to gain read-write access.

B. The current administrator is logged in as read-only because someone else is editing the policy.

C. The current administrator has read-only permissions to Threat Prevention Policy.

D. Another user has locked the rule for editing.

정답: D

문제6

What is false regarding prerequisites for the Central Deployment usage?

A. Security Gateway must have the latest CPUSE Deployment Agent

B. No need to establish SIC between gateways and the management server, since the CDT tool will take care about SIC automatically.

C. The Security Gateway must have a policy installed

D. The administrator must have write permission on SmartUpdate

정답: B

문제7

What does the "unknown" SIC status shown on SmartConsole mean?

A. There is no connection between the Security Gateway and Security Management Server

B. Administrator input the wrong SIC key

C. SIC activation key requires a reset

D. The management can contact the Security Gateway but cannot establish Secure Internal Communication

정답: A

문제8

Which configuration file contains the structure of the Security Server showing the port numbers, corresponding protocol name, and status?

A. $FWDIR/conf/fwauth.conf

B. $FWDIR/state/fwauthd.conf

C. $FWDIR/conf/fwauthd.conf

D. $FWDIR/database/fwauthd.conf

정답: C

문제9

Is it possible to establish a VPN before the user login to the Endpoint Client?

A. no, the user must login first.

B. yes, you had to set neo_remember_user_password to true in the trac.defaults of the Remote Access Client or you can use the endpoint_vpn_remember_user_password attribute in the trac_client_1 .ttm file located in the SFWDIR/conf directory on the Security Gateway

C. yes. you had to set neo_always_connected to true in the trac.defaults of the Remote Access Client or you can use the endpoint_vpn_always_connected attribute in the trac_client_1 .ttm file located in the SFWDIR/conf directory on the Security Gateway

D. yes, you had to enable Machine Authentication in the Gateway object of the Smart Console

정답: D

문제10

Fill in the blank: A new license should be generated and installed in all of the following situations EXCEPT when ________ .

A. The IP address of the Security Management or Security Gateway has changed.

B. The license is attached to the wrong Security Gateway.

C. The existing license expires.

D. The license is upgraded.

정답: A

문제11

Fill in the blank: The R81 feature _____ permits blocking specific IP addresses for a specified time period.

A. Adaptive Threat Prevention

B. Suspicious Activity Monitoring

C. Block Port Overflow

D. Local Interface Spoofing

정답: B

문제12

Rugged appliances are small appliances with ruggedized hardware and like Quantum Spark appliance they use which operating system?

A. Centos Linux

B. Red Hat Enterprise Linux version 5

C. Gaia embedded.

D. Gaia

정답: C

문제13

What command lists all interfaces using Multi-Queue?

A. cpmq set

B. show multiqueue all

C. show interface all

D. cpmq get

정답: D

문제14

On what port does the CPM process run?

A. TCP 900

B. TCP 18192

C. TCP 19009

D. TCP 857

정답: C

문제15

NAT rules are prioritized in which order?
1. Automatic Static NAT
2. Automatic Hide NAT
3. Manual/Pre-Automatic NAT
4. Post-Automatic/Manual NAT rules

A. 1,4,2,3

B. 3,1,2,4

C. 1,2,3,4

D. 4,3,1,2

정답: C

문제16

In which scenario will an administrator need to manually define Proxy ARP?

A. When they configure a "Manual Hide NAT" which translates to an IP address that belongs to one of the firewall's interfaces.

B. When they configure a "Manual Static NAT" which translates to an IP address that does not belong to one of the firewall's interfaces.

C. When they configure an "Automatic Hide NAT" which translates to an IP address that does not belong to one of the firewall's interfaces.

D. When they configure an "Automatic Static NAT" which translates to an IP address that does not belong to one of the firewall's interfaces.

정답: B

문제17

What is the limitation of employing Sticky Decision Function?

A. With SDF enabled, the involved VPN Gateways only supports IKEv1

B. With SDF enabled, only ClusterXL in legacy mode is supported

C. With SDF enabled, you can only have three Sync interfaces at most

D. Acceleration technologies, such as SecureXL and CoreXL are disabled when activating SDF

정답: D

문제18

Kurt is planning to upgrade his Security Management Server to R81.X.
What is the lowest supported version of the Security Management he can upgrade from?

A. R75 Gaia

B. R75 Splat

C. R77.X Gaia

D. R76 Splat

정답: A

문제19

To accelerate the rate of connection establishment, SecureXL groups all connection that match a particular service and whose sole differentiating element is the source port. The type of grouping enables even the very first packets of a TCP handshake to be accelerated. The first packets of the first connection on the same service will be forwarded to the Firewall kernel which will then create a template of the connection.
Which of the these is NOT a SecureXL template?

A. Drop Template

B. NAT Template

C. Deny Template

D. Accept Template

정답: C

문제20

Choose the correct syntax to add a new host named "emailserver1" with IP address 10.50.23.90 using GAiA Management CLI?

A. mgmt_cli add host name ip-address 10.50.23.90

B. mgmt_cli add host "emailserver1" address 10.50.23.90

C. mgmt_cli add host name "emailserver1" ip-address 10.50.23.90

D. mgmt_cli add host name "myHost12 ip" address 10.50.23.90

정답: C

최신 156-315.81.20 무료덤프 - CheckPoint Check Point Certified Security Expert - R81.20

우리와 연락하기

유용한 링크

최신 업데이트