최신 156-315.81.20 무료덤프 - CheckPoint Check Point Certified Security Expert

문제1

Which encryption algorithm is the least secured?

A. AES-256

B. DES

C. 3DES

D. AES-128

정답: B

문제2

If an administrator wants to add manual NAT for addresses now owned by the Check Point firewall, what else is necessary to be completed for it to function properly?

A. Nothing - the proxy ARP is automatically handled in the R81 version

B. Add the proxy ARP configurations in a file called /etc/conf/local.arp

C. Add the proxy ARP configurations in a file called $FWDIR/conf/local.arp

D. Add the proxy ARP configurations in a file called $CPDIR/conf/local.arp

정답: C

문제3

Why would an administrator see the message below?

A. A new Policy Package created on the Gateway and transferred to the Management will be overwritten by the Policy Package currently on the Gateway but can be restored from a periodic backup on the Gateway.

B. A new Policy Package created on the Gateway is going to be installed on the existing Management.

C. A new Policy Package created on the Management is going to be installed to the existing Gateway.

D. A new Policy Package created on both the Management and Gateway will be deleted and must be backed up first before proceeding.

정답: C

문제4

How is communication between different Check Point components secured in R81? As with all questions, select the BEST answer.

A. By using 3DES

B. By using SIC

C. By using ICA

D. By using IPSEC

정답: B

문제5

NAT rules are prioritized in which order?
1. Automatic Static NAT
2. Automatic Hide NAT
3. Manual/Pre-Automatic NAT
4. Post-Automatic/Manual NAT rules

A. 1,4,2,3

B. 3,1,2,4

C. 1,2,3,4

D. 4,3,1,2

정답: C

문제6

When a packet arrives at the gateway, the gateway checks it against the rules in the hop Policy Layer, sequentially from top to bottom, and enforces the first rule that matches a packet.
Which of the following statements about the order of rule enforcement is true?

A. If the Action is Drop, the gateway continues to check rules in the next Policy Layer down.

B. If the Action is Accept, the gateway allows the packet to pass through the gateway.

C. If the Action is Accept, the gateway continues to check rules in the next Policy Layer down.

D. If the Action is Drop, the gateway applies the Implicit Clean-up Rule for that Policy Layer.

정답: C

문제7

Which Check Point software blade provides visibility of users, groups and machines while also providing access control through identity-based policies?

A. Application Control

B. URL Filtering

C. Firewall

D. Identity Awareness

정답: D

문제8

Which of the following is NOT a type of Endpoint Identity Agent?

A. Custom

B. Full

C. Light

D. Terminal

정답: D

문제9

What should the admin do in case the Primary Management Server is temporary down?

A. Run the 'promote_util' to activate the Secondary Management server

B. Logon with SmartConsole to the Secondary Management Server and choose "Make Active' under Actions in the HA Management Menu

C. The Secondary will take over automatically Change the IP in SmartConsole to logon to the private IP of the Secondary Management Server.

D. Use the VIP in SmartConsole you always reach the active Management Server.

정답: D

문제10

You plan to automate creating new objects using new R81 Management API. You decide to use GAIA CLI for this task.
What is the first step to run management API commands on GAIA's shell?

A. login user admin password teabag

B. mgmt_admin@teabag > id.txt

C. mgmt_login

D. mgmt_cli login user "admin" password "teabag" > id.txt

정답: C

문제11

Fill in the blank: With the User Directory Software Blade, you can create user definitions on a(n)_____________ Server.

A. LDAP

B. SecurID

C. SMTP

D. NT domain

정답: A

문제12

The admin lost access to the Gaia Web Management Interface but he was able to connect via ssh.
How can you check if the web service is enabled, running and which port is used?

A. In expert mode run #netstat -tulnp | grep httpd to see if httpd is up and to get the port number. In dish run >show web daemon-enable to see if the web daemon is enabled.

B. In dish run >show web ssl-port to see if the web daemon is enabled and which port is in use. In expert mode run #netstat -anp | grep httpd2 to see if the httpd2 is up

C. In dish run >show web ssl-port to see if the web daemon is enabled and which port is in use. In expert mode run #netstat -anp | grep httpd to see if the httpd is up

D. In expert mode run #netstat -tulnp | grep httpd2 to see if httpd2 is up and to get the port number. In dish run >show web daemon-enable to see if the web daemon is enabled.

정답: B

문제13

Which Check Point daemon monitors the other daemons?

A. fwssd

B. cpwd

C. cpd

D. fwm

정답: B

최신 156-315.81.20 무료덤프 - CheckPoint Check Point Certified Security Expert - R81.20

우리와 연락하기

유용한 링크

최신 업데이트