156-215.80無料問題集「CheckPoint Check Point Certified Security Administrator R80」

質問 1

You have discovered suspicious activity in your network. What is the BEST immediate action to take?

（A）Wait until traffic has been identified before making any changes.

（B）Contact ISP to block the traffic.

（C）Create a suspicious action rule to block that traffic.

（D）Create a policy rule to block the traffic.

正解：C 解答を投票する

質問 2

Which of the following is NOT a valid option when configuring access for Captive Portal?

（A）Through all interfaces

（B）According to the Firewall Policy

（C）From the Internet

（D）Through internal interfaces

正解：C 解答を投票する

質問 3

You have just installed your Gateway and want to analyze the packet size distribution of your traffic with SmartView Monitor.

Unfortunately, you get the message:
"There are no machines that contain Firewall Blade and SmartView Monitor".
What should you do to analyze the packet size distribution of your traffic? Give the BEST answer.

（A）Purchase the SmartView Monitor license for your Security Gateway.

（B）Enable Monitoring on your Security Management Server.

（C）Purchase the SmartView Monitor license for your Security Management Server.

（D）Enable Monitoring on your Security Gateway.

正解：D 解答を投票する

質問 4

Fill in the blanks: A ____ license requires an administrator to designate a gateway for attachment whereas a
_____ license is automatically attached to a Security Gateway.

（A）Local; formal

（B）Local; central

（C）Formal; corporate

（D）Central; local

正解：D 解答を投票する

質問 5

Choose what BEST describes users on Gaia Platform.

（A）There is one default user that cannot be deleted.

（B）There are two default users that cannot be deleted and one SmartConsole Administrator.

（C）There are two default users and one cannot be deleted.

（D）There is one default user that can be deleted.

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

Look at the screenshot below. What CLISH command provides this output?

（A）show configuration

（B）show configuration all

（C）show confd configuration all

（D）show confd configuration

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

Which of the following is NOT a policy type available for each policy package?

（A）Access Control

（B）Threat Prevention

（C）Desktop Security

（D）Threat Emulation

正解：D 解答を投票する

質問 8

What protocol is specifically used for clustered environments?

（A）Synchronized Cluster Protocol

（B）Cluster Control Protocol

（C）Control Cluster Protocol

（D）Clustered Protocol

正解：B 解答を投票する

質問 9

Which one of the following is TRUE?

（A）One policy can be either inline or ordered, but not both

（B）Pre-R80 Gateways do not support ordered layers

（C）Ordered policy is a sub-policy within another policy

（D）Inline layer can be defined as a rule action

正解：D 解答を投票する

質問 10

While in SmartView Tracker, Brady has noticed some very odd network traffic that he thinks could be an intrusion. He decides to block the traffic for 60 minutes, but cannot remember all the steps. What is the correct order of steps needed to set up the block?
1)Select Active Mode tab in SmartView Tracker.
2) Select Tools > Block Intruder.
3) Select Log Viewing tab in SmartView Tracker.
4) Set Blocking Timeout value to 60 minutes.
5) Highlight connection that should be blocked.

（A）3, 2, 5, 4

（B）3, 5, 2, 4

（C）1, 2, 5, 4

（D）1, 5, 2, 4

正解：D 解答を投票する

質問 11

In order to modify Security Policies the administrator can use which of the following tools? Select the BEST answer.

（A）Command line of the Security Management Server or mgmt_cli.exe on any Windows computer.

（B）SmartConsole and WebUI on the Security Management Server.

（C）mgmt_cli or WebUI on Security Gateway and SmartConsole on the Security Management Server.

（D）SmartConsole or mgmt_cli on any computer where SmartConsole is installed.

正解：D 解答を投票する

質問 12

Your manager requires you to setup a VPN to a new business partner site. The administrator from the partner site gives you his VPN settings and you notice that he setup AES 128 for IKE phase 1 and AES 256 for IKE phase 2. Why is this a problematic setup?

（A）All is fine and can be used as is.

（B）Only 128 bit keys are used for phase 1 keys which are protecting phase 2, so the longer key length in phase 2 only costs performance and does not add security due to a shorter key in phase 1.

（C）The two algorithms do not have the same key length and so don't work together. You will get the error
... No proposal chosen...

（D）All is fine as the longest key length has been chosen for encrypting the data and a shorter key length for higher performance for setting up the tunnel.

正解：B 解答を投票する

質問 13

Using mgmt_cli, what is the correct syntax to import a host object called Server_1 from the CLI?

（A）mgmt_cli add host name "Server_1" ip_address "10.15.123.10" --format json

（B）mgmt_cli add object-host "Server_1" ip_address "10.15.123.10" --format json

（C）mgmt_cli add object "Server_1" ip_address "10.15.123.10" --format json

（D）mgmt_cli add-host "Server_1" ip_address "10.15.123.10" --format txt

正解：D 解答を投票する

156-215.80 無料問題集「CheckPoint Check Point Certified Security Administrator R80」

弊社を連絡する

関連リンク

トップ試験