最新の無料156-315.80効率的問題集をダウンロード2022年02月26日更新された457問がある [Q32-Q54]

最新の無料156-315.80効率的問題集をダウンロード2022年02月26日更新された457問がある

CheckPoint 156-315.80試験練習テスト解答

質問 32
Using mgmt_cli, what is the correct syntax to import a host object called Server_1 from the CLI?

A. mgmt._cli add object "Server-1" ip-address "10.15.123.10" --format json
B. mgmt_cli add host name "Server_1" ip-address "10.15.123.10" --format json
C. mgmt_cli add-host "Server_1" ip_address "10.15.123.10" --format txt
D. mgmt_cli add object-host "Server_1" ip-address "10.15.123.10" --format json

正解: B

解説:
Explanation/Reference:
Example:
mgmt_cli add host name "New Host 1" ip-address "192.0.2.1" --format json
* "--format json" is optional. By default the output is presented in plain text.
Reference: https://sc1.checkpoint.com/documents/latest/APIs/index.html#cli/add-host~v1.1%20

質問 33
What kind of information would you expect to see using the sim affinity command?

A. Network interfaces and core distribution used for CoreXL
B. Overview over SecureXL templated connections
C. The VMACs used in a Security Gateway cluster
D. The involved firewall kernel modules in inbound and outbound packet chain

正解: A

質問 34
When Identity Awareness is enabled, which identity source(s) is(are) used for Application Control?

A. AD Query
B. RADIUS
C. AD Query and Browser-based Authentication
D. Remote Access and RADIUS

正解: C

解説:
Identity Awareness gets identities from these acquisition sources:
* AD Query
* Browser-Based Authentication
* Endpoint Identity Agent
* Terminal Servers Identity Agent
* Remote Access

質問 35
Your manager asked you to disk you to check the status of SecureXL, and its enabled templates and feature.
What command will you use to provide such information to manager?

A. fwaccel stat
B. fw access stats
C. fw accel stat
D. fwaccel stats

正解: C

質問 36
Which of the following commands shows the status of processes?

A. cpwd -l
B. cpwd admin_list
C. cpwd_admin -l
D. cpwd_admin list

正解: D

解説:
References:

質問 37
As an administrator, you may be required to add the company logo to reports. To do this, you would save the logo as a PNG file with the name 'cover-company-logo.png' and then copy that image file to which directory on the SmartEvent server?

A. $RTDIR/smartevent/conf
B. $RTDIR/smartview/conf
C. $FWDIR/smartview/conf
D. SFWDIR/smartevent/conf

正解: B

解説:
References:

質問 38
You have a Geo-Protection policy blocking Australia and a number of other countries. Your network now requires a Check Point Firewall to be installed in Sydney, Australia.
What must you do to get SIC to work?

A. Create a rule at the top in your Check Point firewall to bypass the Geo-Protection
B. Nothing - Check Point control connections function regardless of Geo-Protection policy
C. Create a rule at the top in the Sydney firewall to allow control traffic from your network
D. Remove Geo-Protection, as the IP-to-country database is updated externally, and you have no control of this.

正解: B

質問 39
Which encryption algorithm is the least secured?

A. 3DES
B. AES-256
C. DES
D. AES-128

正解: C

質問 40
In the Firewall chain mode FFF refers to:

A. No Match
B. Stateless Packets
C. Stateful Packets
D. All Packets

正解: D

質問 41
What has to be taken into consideration when configuring Management HA?

A. SmartConsole must be closed prior to synchronized changes in the objects database
B. If you wanted to use Full Connectivity Upgrade, you must change the Implied Rules to allow
FW1_cpredundant to pass before the Firewall Control Connections.
C. The Database revisions will not be synchronized between the management servers
D. For Management Server synchronization, only External Virtual Switches are supported. So, if you
wanted to employ Virtual Routers instead, you have to reconsider your design.

正解: C

質問 42
SmartEvent will automatically define what as events?

A. HTTPS
B. Firewall
C. VON
D. IPS

正解: D

質問 43
Which command is used to set the CCP protocol to Multicast?

A. cphaprob set_ccp multicast
B. cphaprob set_ccp no_broadcast
C. cphaconf set_ccp multicast
D. cphaconf set_ccp no_broadcast

正解: C

解説:
Explanation/Reference: https://supportcenter.checkpoint.com/supportcenter/portal?
eventSubmit_doGoviewsolutiondetails=&solutionid=sk20576

質問 44
Which is the least ideal Synchronization Status for Security Management Server High Availability deployment?

A. Lagging
B. Collision
C. Synchronized
D. Never been synchronized

正解: B

質問 45
When doing a Stand-Alone Installation, you would install the Security Management Server with which other Check Point architecture component?

A. None, Security Management Server would be installed by itself.
B. SmartEvent
C. SecureClient
D. SmartConsole
E. Security Gateway

正解: E

解説:
Explanation/Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Installation_and_Upgrade_Guide- webAdmin/89230.htm

質問 46
Which command collects diagnostic data for analyzing customer setup remotely?

A. cpinfo
B. migrate export
C. sysinfo
D. cpview
CPInfo is an auto-updatable utility that collects diagnostics data on a customer's machine at the time of execution and uploads it to Check Point servers (it replaces the standalone cp_uploader utility for uploading files to Check Point servers).
The CPInfo output file allows analyzing customer setups from a remote location. Check Point support engineers can open the CPInfo file in a demo mode, while viewing actual customer Security Policies and Objects. This allows the in-depth analysis of customer's configuration and environment settings.

正解: A

質問 47
What API command below creates a new host with the name "New Host" and IP address of "192.168.0.10"?

A. new host name "New Host" ip-address "192.168.0.10"
B. set host name "New Host" ip-address "192.168.0.10"
C. add host name "New Host" ip-address "192.168.0.10"
D. create host name "New Host" ip-address "192.168.0.10"

正解: C

質問 48
With MTA (Mail Transfer Agent) enabled the gateways manages SMTP traffic and holds external email with
potentially malicious attachments. What is required in order to enable MTA (Mail Transfer Agent)
functionality in the Security Gateway?

A. Threat Cloud Intelligence
B. Endpoint Total Protection
C. Threat Prevention Software Blade Package
D. Traffic on port 25

正解: C

質問 49
What is the mechanism behind Threat Extraction?

A. This a new mechanism which extracts malicious files from a document to use it as a counter-attack
against its sender.
B. This is a new mechanism which is able to collect malicious files out of any kind of file types to destroy
it prior to sending it to the intended recipient.
C. This is a new mechanism to identify the IP address of the sender of malicious codes and put it into the
SAM database (Suspicious Activity Monitoring).
D. Any active contents of a document, such as JavaScripts, macros and links will be removed from the
document and forwarded to the intended recipient, which makes this solution very fast.

正解: D

質問 50
In order to get info about assignment (FW, SND) of all CPUs in your SGW, what is the most accurate CLI command?

A. fw ctl multik stat
B. cpinfo
C. fw ctl affinity -l a -r -v
D. fw ctl sdstat

正解: C

質問 51
What is the recommended configuration when the customer requires SmartLog indexing for 14 days and SmartEvent to keep events for 180 days?

A. it is not possible.
B. Choose different setting for log storage and SmartEvent db
C. Use Multi-Domain Management Server.
D. Install Management and SmartEvent on different machines.

正解: B

質問 52
Which command is used to set the CCP protocol to Multicast?

A. cphaprob set_ccp multicast
B. cphaprob set_ccp no_broadcast
C. cphaconf set_ccp multicast
D. cphaconf set_ccp no_broadcast

正解: C

質問 53
The "Hit count" feature allows tracking the number of connections that each rule matches. Will the Hit count feature work independently from logging and Track the hits if the Track option is set to "None"?

A. No, it will work independently. Hit Count will be shown only for rules Track option set as Log or alert.
B. No, it will not work independently because hit count requires all rules to be logged.
C. Yes it will work independently because when you enable Hit Count, the SMS collects the data from supported Security Gateways.
D. Yes it will work independently as long as "analyze all rules" tick box is enabled on the Security Gateway.

正解: C

解説:
References:

質問 54
......

CheckPoint 156-315.80 認定試験の出題範囲：

トピック	出題範囲
トピック 1	Backup your Security Gateway and Management Server
トピック 2	Upgrade and Troubleshoot a Management Server
トピック 3	Configure and Maintain Security Acceletration Solutions
トピック 4	Advanced Upgrading Techniques Migrate to a Clustering Security Solution
トピック 5	Create Events for Compliance Reporting Man Test and Troublehoot Numerous Deployment Scenarios