최신 156-315.81 무료덤프 - CheckPoint Check Point Certified Security Expert R81

문제1

Which of the following is NOT an option to calculate the traffic direction?

A. Incoming

B. Outgoing

C. External

D. Internal

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제2

Fill in the blank: Browser-based Authentication sends users to a web page to acquire identities using ________ .

A. Captive Portal and Transparent Kerberos Authentication

B. Captive Portal

C. UserCheck

D. User Directory

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제3

What are valid authentication methods for mutual authenticating the VPN gateways?

A. Pre-Shared Secrets and Kerberos Ticket

B. PKI Certificates and DynamicID OTP

C. Pre-shared Secret and PKI Certificates

D. PKI Certificates and Kerberos Tickets

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제4

Alice & Bob are concurrently logged In via SSH on the same Check Point Security Gateway as user "admin* however Bob was first logged in and acquired the lock Alice Is not aware that Bob is also togged in to the same Security Management Server as she is but she needs to perform very urgent configuration changes - which of the following GAlAclish command is true for overriding Bobs configuration database lock:

A. lock database override

B. unlock override database

C. database unlock override

D. unlock database override

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제5

Which Mobile Access Solution is clientless?

A. Endpoint Security Suite

B. Checkpoint Mobile

C. SecuRemote

D. Mobile Access Portal

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제6

In the Check Point Firewall Kernel Module, each Kernel is associated with a key, which specifies the type of traffic applicable to the chain module. For Stateful Mode configuration, chain modules marked with __________________ will not apply.

A. 1

B. ffff

C. 3

D. 2

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제7

To fully enable Dynamic Dispatcher on a Security Gateway:

A. Edit/proc/interrupts to include multik set_mode 1 at the bottom of the file, save, and reboot.

B. Using cpconfig, update the Dynamic Dispatcher value to "full" under the CoreXL menu.

C. run fw multik set_mode 1 in Expert mode and then reboot.

D. run fw ctl multik set_mode 9 in Expert mode and then Reboot.

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제8

Which upgrade method you should use upgrading from R80.40 to R81.20 to avoid any downtime?

A. Connectivity Upgrade (CU)

B. Zero Downtime Upgrade (ZDU)

C. Multi-Version Cluster Upgrade (MVC)

D. Minimal Effort Upgrade (ME)

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제9

SmartEvent Security Checkups can be run from the following Logs and Monitor activity:

A. Reports

B. Views

C. Advanced

D. Checkups

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제10

What are the available options for downloading Check Point hotfixes in Gala WebUI (CPUSE)?

A. Manually, Automatic, Disabled

B. Manually, Scheduled, Automatic

C. Manually, Scheduled, Disabled

D. Manually, Scheduled, Enabled

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제11

What is the recommended number of physical network interfaces in a Mobile Access cluster deployment?

A. 3 Interfaces - an interface leading to the organization, a second interface leading to the Internet, a third interface for synchronization.

B. 4 Interfaces - an interface leading to the organization, a second interface leading to the internet, a third interface for synchronization, a fourth interface leading to the Security Management Server.

C. 1 Interface - an interface leading to the organization and the Internet, and configure for synchronization.

D. 2 Interfaces - a data interface leading to the organization and the Internet, a second interface for synchronization.

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제12

While enabling the Identity Awareness blade the Identity Awareness wizard does not automatically detect the windows domain. Why does it not detect the windows domain?

A. Security Gateway is not part of the Domain

B. Identity Awareness is not enabled on Global properties

C. Security Management Server is not part of the domain

D. SmartConsole machine is not part of the domain

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제13

Kofi, the administrator of the ALPHA Corp network wishes to change the default Gaia WebUI Portal port number currently set on the default HTTPS port. Which CLISH commands are required to be able to change this TCP port?

A. set Gaia-portal port <new port number>

B. set Gaia-portal https-port <new port number>

C. set web https-port <new port number>

D. set web ssl-port <new port number>

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제14

When using CPSTAT, what is the default port used by the AMON server?

A. 18192

B. 18194

C. 18190

D. 18191

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제15

You have a Geo-Protection policy blocking Australia and a number of other countries. Your network now requires a Check Point Firewall to be installed in Sydney, Australia.
What must you do to get SIC to work?

A. Nothing - Check Point control connections function regardless of Geo-Protection policy

B. Remove Geo-Protection, as the IP-to-country database is updated externally, and you have no control of this.

C. Create a rule at the top in the Sydney firewall to allow control traffic from your network

D. Create a rule at the top in your Check Point firewall to bypass the Geo-Protection

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제16

To optimize Rule Base efficiency, the most hit rules should be where?

A. Towards the top of the Rule Base.

B. Removed from the Rule Base.

C. Towards the bottom of the Rule Base.

D. Towards the middle of the Rule Base.

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

최신 156-315.81 무료덤프 - CheckPoint Check Point Certified Security Expert R81

우리와 연락하기

유용한 링크

최신 업데이트