156-215.76無料問題集「CheckPoint Check Point Certified Security Administrator

質問 1

Study the Rule base and Client Authentication Action properties screen

After being authenticated by the Security Gateway, when a user starts an HTTP connection to a Web site, the user tries to FTP to another site using the command line. What happens to the user? The:

（A）user is prompted from that FTP site only, and does not need to enter his username and password for Client Authentication.

（B）FTP connection is dropped by Rule 2.

（C）user is prompted for authentication by the Security Gateway again.

（D）FTP data connection is dropped after the user is authenticated successfully.

正解：A 解答を投票する

質問 2

Installing a policy usually has no impact on currently existing connections. Which statement is TRUE?

（A）All connections are reset, so a policy install is recommended during announced downtime only.

（B）All FTP downloads are reset; users have to start their downloads again.

（C）Site-to-Site VPNs need to re-authenticate, so Phase 1 is passed again after installing the Security Policy.

（D）Users being authenticated by Client Authentication have to re-authenticate.

正解：D 解答を投票する

質問 3

What mechanism does a gateway configured with Identity Awareness and LDAP initially use to communicate with a Windows 2003 or 2008 server?

（A）WMI

（B）CIFS

（C）LDAP

（D）RCP

正解：A 解答を投票する

質問 4

The London Security Gateway Administrator has just installed the Security Gateway and Management Server. He has not changed any default settings. As he tries to configure the Gateway, he is unable to connect. Which troubleshooting suggestion will NOT help him?

（A）Verify that the Rule Base explicitly allows management connections.

（B）Check if some intermediate network device has a wrong routing table entry, VLAN assignment, duplex-mismatch, or trunk issue.

（C）Test the IP address assignment and routing settings of the Security Management Server, Gateway, and console client.

（D）Verify the SIC initialization.

正解：A 解答を投票する

質問 5

Static NAT connections, by default, translate on which firewall kernel inspection point?

（A）Eitherbound

（B）Post-inbound

（C）Inbound

（D）Outbound

正解：C 解答を投票する

質問 6

Which of the following is a hash algorithm?

（A）3DES

（B）IDEA

（C）MD5

（D）DES

正解：C 解答を投票する

質問 7

Which of the following R76 SmartView Tracker views will display a popup warning about performance implications on the Security Gateway?

（A）Active Tab

（B）All Records Query

（C）Account Query

（D）Audit Tab

正解：A 解答を投票する

質問 8

Which operating systems are supported by a Check Point Security Gateway on an open server? Select MOST complete list.

（A）Check Point GAiA and SecurePlatform, IPSO, Sun Solaris, Microsoft Windows

（B）Check Point GAiA, Microsoft Windows, Red Hat Enterprise Linux, Sun Solaris, IPSO

（C）Check Point GAiA and SecurePlatform, and Microsoft Windows

（D）Sun Solaris, Red Hat Enterprise Linux, Check Point SecurePlatform, IPSO, Microsoft Windows

正解：C 解答を投票する

質問 9

What information is found in the SmartView Tracker Management log?

（A）SIC revoke certificate event

（B）Destination IP address

（C）Most accessed Rule Base rule

（D）Number of concurrent IKE negotiations

正解：A 解答を投票する

質問 10

How can you check whether IP forwarding is enabled on an IP Security Appliance?

（A）clish -c show routing active enable

（B）echo 1 > /proc/sys/net/ipv4/ip_forward

（C）ipsofwd list

（D）cat /proc/sys/net/ipv4/ip_forward

正解：C 解答を投票する

質問 11

Users with Identity Awareness Agent installed on their machines login with __________, so that when the user logs into the domain, that information is also used to meet Identity Awareness credential requests.

（A）Single Sign-On

（B）Key-logging

（C）SecureClient

（D）ICA Certificates

正解：A 解答を投票する

質問 12

Which SmartConsole component can Administrators use to track changes to the Rule Base?

（A）SmartView Monitor

（B）SmartView Tracker

（C）WebUI

（D）SmartReporter

正解：B 解答を投票する

質問 13

How can you activate the SNMP daemon on a Check Point Security Management Server?

（A）In SmartDashboard, right-click a Check Point object and select Activate SNMP.

（B）From cpconfig, select SNMP extension.

（C）Any of these options will work.

（D）Using the command line, enter snmp_install.

正解：B 解答を投票する

質問 14

Which command allows Security Policy name and install date verification on a Security Gateway?

（A）fw ctl pstat -policy

（B）fw stat -l

（C）fw ver -p

（D）fw show policy

正解：B 解答を投票する

156-215.76 無料問題集「CheckPoint Check Point Certified Security Administrator - GAiA」

弊社を連絡する

関連リンク

トップ試験