156-215.76無料問題集「CheckPoint Check Point Certified Security Administrator

質問 1

Your network is experiencing connectivity problems and you want to verify if routing problems are present. You need to disable the firewall process but still allow routing to pass through the Gateway running on an IP Appliance running IPSO. What command do you need to run after stopping the firewall service?

（A）ipsofwd slowpath

（B）fw load routed

（C）fw fwd routing

（D）ipsofwd on admin

正解：D 解答を投票する

質問 2

In SmartDashboard, you configure 45 MB as the required free hard-disk space to accommodate logs. What can you do to keep old log files, when free space falls below 45 MB?

（A）Do nothing. The Security Management Server automatically copies old logs to a backup server before purging.

（B）Configure a script to run fw logswitch and SCP the output file to a separate file server.

（C）Do nothing. Old logs are deleted, until free space is restored.

（D）Use the command fwm logexport to export the old log files to another location.

正解：B 解答を投票する

質問 3

Which of the following can be found in cpinfo from an enforcement point?

（A）Policy file information specific to this enforcement point

（B）Everything NOT contained in the file r2info

（C）The complete file objects_5_0.c

（D）VPN keys for all established connections to all enforcement points

正解：A 解答を投票する

質問 4

You would use the Hide Rule feature to:

（A）Hide rules from read-only administrators.

（B）Make rules invisible to incoming packets.

（C）Hide rules from a SYN/ACK attack.

（D）View only a few rules without the distraction of others.

正解：D 解答を投票する

質問 5

Which of the following commands can be used to remove site-to-site IPsec Security Association (SA)?

（A）vpn ipsec

（B）vpn tu

（C）fw ipsec tu

（D）vpn debug ipsec

正解：B 解答を投票する

質問 6

You need to completely reboot the Operating System after making which of the following changes on the Security Gateway? (i.e. the command cprestart is not sufficient.)
1.Adding a hot-swappable NIC to the Operating System for the first time.
2.Uninstalling the R75 Power/UTM package.
3.Installing the R75 Power/UTM package.
4.Re-establishing SIC to the Security Management Server.
5.Doubling the maximum number of connections accepted by the Security Gateway.

（A）1, 2, 3, 4, and 5

（B）2, 3 only

（C）3, 4, and 5 only

（D）3 only

正解：B 解答を投票する

質問 7

You want to implement Static Destination NAT in order to provide external, Internet users access to an internal Web Server that has a reserved (RFC 1918) IP address. You have an unused valid IP address on the network between your Security Gateway and ISP router. You control the router that sits between the firewall external interface and the Internet.
What is an alternative configuration if proxy ARP cannot be used on your Security Gateway?

（A）Place a static host route on the firewall for the valid IP address to the internal Web server.

（B）Place a static ARP entry on the ISP router for the valid IP address to the firewall's external address.

（C）Publish a proxy ARP entry on the internal Web server instead of the firewall for the valid IP address.

（D）Publish a proxy ARP entry on the ISP router instead of the firewall for the valid IP address.

正解：B 解答を投票する

質問 8

In SmartDashboard, Translate destination on client side is checked in Global Properties. When Network Address Translation is used:

（A）VLAN tagging cannot be defined for any hosts protected by the Gateway.

（B）It is necessary to add a static route to the Gateway's routing table.

（C）The Security Gateway's ARP file must be modified.

（D）It is not necessary to add a static route to the Gateway's routing table.

正解：D 解答を投票する

質問 9

SmartView Tracker R76 consists of three different modes. They are:

（A）Log, Active, and Audit

（B）Log, Track, and Management

（C）Network and Endpoint, Active, and Management

（D）Log, Active, and Management

正解：C 解答を投票する

質問 10

When using SecurePlatform, it might be necessary to temporarily change the MAC address of the interface eth 0 to 00:0C:29:12:34:56. After restarting the network the old MAC address should be active. How do you configure this change?

（A）As expert user, issue these commands: # IP link set eth0 down # IP link set eth0 addr 00:0C:29:12:34:56 # IP link set eth0 up

（B）Open the WebUI, select Network > Connections > eth0. Place the new MAC address in the field Physical Address, and press Apply to save the settings.

（C）Edit the file /etc/sysconfig/netconf.c and put the new MAC address in the field

（D）As expert user, issue the command: # IP link set eth0 addr 00:0C:29:12:34:56

正解：A 解答を投票する

質問 11

You have created a Rule Base for firewall, websydney. Now you are going to create a new policy package with security and address translation rules for a second Gateway.

What is TRUE about the new package's NAT rules?

（A）Rules 4 and 5 will appear in the new package.

（B）NAT rules will be empty in the new package.

（C）Rules 1, 2, 3 will appear in the new package.

（D）Only rule 1 will appear in the new package.

正解：C 解答を投票する

質問 12

You can include External commands in SmartView Tracker by the menu Tools > Custom Commands.
The Security Management Server is running under SecurePlatform, and the GUI is on a system running Microsoft Windows. How do you run the command traceroute on an IP address?

（A）Go to the menu Tools > Custom Commands and configure the Windows command tracert.exe to the list.

（B）Use the program GUIdbedit to add the command traceroute to the Security Management Server properties.

（C）There is no possibility to expand the three pre-defined options Ping, Whois, and Nslookup.

（D）Go to the menu, Tools > Custom Commands and configure the Linux command traceroute to the list.

正解：A 解答を投票する

質問 13

Certificates for Security Gateways are created during a simple initialization from _____________.

（A）sysconfig

（B）SmartUpdate

（C）The ICA management tool

（D）SmartDashboard

正解：D 解答を投票する

質問 14

What CANNOT be configured for existing connections during a policy install?

（A）Reset all connections

（B）Re-match connections

（C）Keep all connections

（D）Keep data connections

正解：A 解答を投票する

質問 15

You are troubleshooting NAT entries in SmartView Tracker. Which column do you check to view the new source IP?

（A）XlateDPort

（B）XlateSrc

（C）XlateSPort

（D）XlateDst

正解：B 解答を投票する

156-215.76 無料問題集「CheckPoint Check Point Certified Security Administrator - GAiA」

弊社を連絡する

関連リンク

トップ試験