최신 156-315.81 무료덤프 - CheckPoint Check Point Certified Security Expert R81

문제1

When Identity Awareness is enabled, which identity source(s) is(are) used for Application Control?

A. RADIUS

B. AD Query

C. Remote Access and RADIUS

D. AD Query and Browser-based Authentication

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제2

After the initial installation on Check Point appliance, you notice that the Management-interface and default gateway are incorrect.
Which commands could you use to set the IP to 192.168.80.200/24 and default gateway to 192.168.80.1.

A. set interface Mgmt ipv4-address 192.168.80.200 255.255.255.0set static-route 0.0.0.0. 0.0.0.0 gw 192.168.80.1 onsave config

B. set interface Mgmt ipv4-address 192.168.80.200 mask-length 24set static-route default nexthop gateway address 192.168.80.1 onsave config

C. set interface Mgmt ipv4-address 192.168.80.200 mask-length 24add static-route default nexthop gateway address 192.168.80.1 onsave config

D. set interface Mgmt ipv4-address 192.168.80.200 255.255.255.0add static-route 0.0.0.0. 0.0.0.0 gw 192.168.80.1 onsave config

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제3

You have pushed policy to GW-3 and now cannot pass traffic through the gateway. As a last resort, to restore traffic flow, what command would you run to remove the latest policy from GW-3?

A. fw unloadpolicy

B. fw unloadlocal

C. fwm unload policy

D. fwm unload local

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제4

IF the first packet of an UDP session is rejected by a rule definition from within a security policy (not including the clean up rule), what message is sent back through the kernel?

A. TCP FIN

B. TCP RST

C. ICMP unreachable

D. Nothing

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제5

In SmartConsole, objects are used to represent physical and virtual network components and also some logical components. These objects are divided into several categories. Which of the following is NOT an objects category?

A. Limit

B. Resource

C. Network Object

D. Custom Application / Site

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제6

Automatic affinity means that if SecureXL is running, the affinity for each interface is automatically reset every

A. 5 sec

B. 30 sec

C. 15 sec

D. 60 sec

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제7

What is UserCheck?

A. Messaging tool used to verify a user's credentials.

B. Communication tool used to notify an administrator when a new user is created.

C. Communication tool used to inform a user about a website or application they are trying to access.

D. Administrator tool used to monitor users on their network.

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제8

The system administrator of a company is trying to find out why acceleration is not working for the traffic. The traffic is allowed according to the rule base and checked for viruses. But it is not accelerated.
What is the most likely reason that the traffic is not accelerated?

A. Acceleration is not enabled.

B. There is a virus found. Traffic is still allowed but not accelerated.

C. The connection required a Security server.

D. The traffic is originating from the gateway itself.

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제9

Fill in the blank: An identity server uses a __________ for user authentication.

A. Token

B. One-time password

C. Certificate

D. Shared secret

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제10

What will SmartEvent automatically define as events?

A. VPN

B. Firewall

C. HTTPS

D. IPS

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제11

When requiring certificates for mobile devices, make sure the authentication method is set to one of the following, Username and Password, RADIUS or ________.

A. SecureID

B. SecurID

C. Complexity

D. TacAcs

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제12

The Firewall kernel is replicated multiple times, therefore:

A. The Firewall kernel only touches the packet if the connection is accelerated

B. The Firewall kernel is replicated only with new connections and deletes itself once the connection times out

C. The Firewall can run different policies per core

D. The Firewall can run the same policy on all cores.

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제13

Fill in the blank. Once a certificate is revoked from the Security Gateway by the Security Management Server, the certificate information is ________ .

A. Stored on the Security Management Server.

B. Sent to the Internal Certificate Authority.

C. Sent to the Security Administrator.

D. Stored on the Certificate Revocation List.

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제14

What information is NOT collected from a Security Gateway in a Cpinfo?

A. OS and network statistics

B. System message logs

C. Firewall logs

D. Configuration and database files

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제15

Which statement is most correct regarding about "CoreXL Dynamic Dispatcher"?

A. The CoreXL FW instances assignment mechanism is based on the utilization of CPU cores

B. The CoreXL FW instanxces assignment mechanism is based on Source MAC addresses, Destination MAC addresses

C. The CoreXl FW instances assignment mechanism is based on Source IP addresses, Destination IP addresses, and the IP 'Protocol' type

D. The CoreXL FW instances assignment mechanism is based on IP Protocol type

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제16

What is the default shell for the command line interface?

A. Normal

B. Admin

C. Expert

D. Clish

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제17

Which of the following Central Deployment is NOT a limitation in R81.20 SmartConsole?

A. Security Gateways/Clusters in ClusterXL HA new mode

B. Dedicated SmartEvent Server

C. Dedicated Log Server

D. Security Gateway Clusters in Load Sharing mode

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

최신 156-315.81 무료덤프 - CheckPoint Check Point Certified Security Expert R81

우리와 연락하기

유용한 링크

최신 업데이트