156-215.80無料問題集「CheckPoint Check Point Certified Security Administrator R80」

質問 1

What is the difference between SSL VPN and IPSec VPN?

（A）SSL VPN and IPSec VPN are the same

（B）IPSec VPN requires installation of a resident VPN client and SSL VPN requires only an installed Browser

（C）SSL VPN requires installation of a resident VPN client

（D）IPSec VPN does not require installation of a resident VPN client

正解：B 解答を投票する

質問 2

SandBlast offers flexibility in implementation based on their individual business needs. What is an option for deployment of Check Point SandBlast Zero-Day Protection?

（A）Threat Agent Solution

（B）Load Sharing Mode Services

（C）Smart Cloud Services

（D）Public Cloud Services

正解：C 解答を投票する

質問 3

What happens when you run the command: fw sam -J src [Source IP Address]?

（A）Connections to the specified target are blocked without the need to change the Security Policy.

（B）Connections to and from the specified target are blocked with the need to change the Security Policy.

（C）Connections from the specified source are blocked without the need to change the Security Policy.

（D）Connections to and from the specified target are blocked without the need to change the Security Policy.

正解：C 解答を投票する

質問 4

Which option, when applied to a rule, allows traffic to VPN gateways in specific VPN communities?

（A）All Site-to-Site VPN Communities

（B）All Connections (Clear or Encrypted)

（C）Accept all encrypted traffic

（D）Specific VPN Communities

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

Which type of the Check Point license ties the package license to the IP address of the Security Management Server?

（A）Formal

（B）Local

（C）Corporate

（D）Central

正解：D 解答を投票する

質問 6

What does it mean if Bob gets this result on an object search? Refer to the image below. Choose the BEST answer.

（A）There is no object on the database with that name or that IP address.

（B）Object does not have a NAT IP address.

（C）Search detailed is missing the subnet mask.

（D）There is no object on the database with that IP address.

正解：A 解答を投票する

質問 7

The Firewall kernel is replicated multiple times, therefore:

（A）The Firewall can run different policies per core

（B）The Firewall kernel is replicated only with new connections and deletes itself once the connection times out

（C）The Firewall kernel only touches the packet if the connection is accelerated

（D）The Firewall can run the same policy on all cores

正解：D 解答を投票する

質問 8

Fill in the blank: A _______ is used by a VPN gateway to send traffic as if it were a physical interface.

（A）VPN interface

（B）VPN router

（C）VPN Tunnel Interface

（D）VPN community

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 9

Please choose correct command syntax to add an "emailserver1" host with IP address 10.50.23.90 using GAiA management CLI?

（A）mgmt add host name ip-address 10.50.23.90

（B）host name myHost12 ip-address 10.50.23.90

（C）add host name emailserver1 ip-address 10.50.23.90

（D）mgmt add host name emailserver1 ip-address 10.50.23.90

正解：D 解答を投票する

質問 10

Which message indicates IKE Phase 2 has completed successfully?

（A）Quick Mode Complete

（B）IKE Mode Complete

（C）Main Mode Complete

（D）Aggressive Mode Complete

正解：A 解答を投票する

質問 11

Using mgmt_cli, what is the correct syntax to import a host object called Server_1 from the CLI?

（A）mgmt_cli add host name "Server_1" ip_address "10.15.123.10" --format json

（B）mgmt_cli add object-host "Server_1" ip_address "10.15.123.10" --format json

（C）mgmt_cli add object "Server_1" ip_address "10.15.123.10" --format json

（D）mgmt_cli add-host "Server_1" ip_address "10.15.123.10" --format txt

正解：D 解答を投票する

質問 12

What component of R80 Management is used for indexing?

（A）SOLR

（B）API Server

（C）fwm

（D）DBSync

正解：A 解答を投票する

質問 13

Harriet wants to protect sensitive information from intentional loss when users browse to a specific URL:
https://personal.mymail.com, which blade will she enable to achieve her goal?

（A）SSL Inspection

（B）Application Control

（C）URL Filtering

（D）DLP

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 14

Which of the following are types of VPN communities?

（A）Star, octagon, and combination

（B）Pentagon, star, and combination

（C）Meshed, star, and combination

（D）Combined and star

正解：C 解答を投票する

質問 15

What Check Point technologies deny or permit network traffic?

（A）Application Control, DLP

（B）Packet Filtering, Stateful Inspection, Application Layer Firewall.

（C）IPS, Mobile Threat Protection

（D）ACL, SandBlast, MPT

正解：B 解答を投票する

質問 16

An administrator is creating an IPsec site-to-site VPN between his corporate office and branch office. Both offices are protected by Check Point Security Gateway managed by the same Security Management Server (SMS). While configuring the VPN community to specify the pre-shared secret, the administrator did not find a box to input the pre-shared secret. Why does it not allow him to specify the pre-shared secret?

（A）Pre-shared secret is already configured in Global Properties

（B）The checkbox "Use only Shared Secret for all external members" is not checked

（C）The Gateway is an SMB device

（D）Certificate based Authentication is the only authentication method available between two Security Gateway managed by the same SMS

正解：D 解答を投票する

156-215.80 無料問題集「CheckPoint Check Point Certified Security Administrator R80」

弊社を連絡する

関連リンク

トップ試験