156-315.77無料問題集「CheckPoint Check Point Certified Security Expert」

質問 1

What is the greatest benefit derived from VPNs compared to frame relay, leased lines any other types of dedicated networks?

（A）Less failure/downtime

（B）stronger authentication

（C）Greater performance

（D）lower cost

正解：D 解答を投票する

質問 2

SmartReporter reports can be used to analyze data from a penetration-testing regimen in all of the following examples, EXCEPT:

（A）Analyzing traffic patterns against public resources.

（B）Tracking attempted port scans.

（C）Analyzing access attempts via social-engineering.

（D）Possible worm/malware activity.

正解：C 解答を投票する

質問 3

VPN access control would fall under which VPN component?

（A）Security

（B）QoS

（C）Management

（D）Performance

正解：A 解答を投票する

質問 4

What firewall kernel table stores information about port allocations for Hide NAT connections?

（A）NAT_alloc

（B）NAT_src_any_list

（C）fwx_alloc

（D）NAT_dst_any_list

正解：C 解答を投票する

質問 5

Exhibit:

What cluster mode is represented in this case?

（A）Load Sharing (multicast mode)

（B）3rd party cluster

（C）HA (New mode).

（D）Load Sharing Unicast (Pivot) mode

正解：C 解答を投票する

質問 6

Which technology would describe RDED for Qos?

（A）A mechanism for managing packet buffers.

（B）A mechanism for reducing the number of retransmits and retransmit storms.

（C）A mechanism to derive complete state and context information for all network traffic.

（D）A mechanism to accurately classify traffic and place it in the proper transmission queue.

正解：B 解答を投票する

質問 7

You have installed a R77 Security Gateway on GAiA. To manage the Gateway from the enterprise Security Management Server, you create a new Gateway object and Security Policy.
When you install the new Policy from the Policy menu, the Gateway object does not appear in the Install Policy window as a target. What is the problem?

（A）The object was created with Node > Gateway.

（B）The new Gateway's temporary license has expired.

（C）The Gateway object is not specified in the first policy rule column Install On.

（D）No Masters file is created for the new Gateway.

正解：A 解答を投票する

質問 8

Which operating system(s) support(s) unnumbered VPN Tunnel Interfaces (VTIs) for route- based VPN's?

（A）IPSO 3.9 and higher

（B）Red Hat Linux

（C）Secure Platform for NGX and higher

（D）Solaris 9 and higher

正解：A 解答を投票する

質問 9

You find that Gateway fw2 can NOT be added to the cluster object.

What are possible reasons for that?
1) fw2 is a member in a VPN community.
2) ClusterXL software blade is not enabled on fw2.
3) fw2 is a DAIP Gateway.

（A）1 or 2

（B）All

（C）2 or 3

（D）1 or 3

正解：D 解答を投票する

質問 10

When troubleshooting user authentication, you may see the following entries in a debug of the user authentication process. In which order are these messages likely to appear?

（A）cpLdapGetUser, au_fetchuser, cpLdapCheck, make_au, au_auth, au_auth_auth

（B）make_au, au_auth, au_fetchuser, cpLdapGetUser, cpLdapCheck, au_auth_auth

（C）au_fetchuser, make_au, au_auth, cpLdapGetUser, au_auth_auth, cpLdapCheck

（D）make_au, au_auth, au_fetchuser, au_auth_auth, cpLdapCheck, cpLdapGetUser

正解：B 解答を投票する

質問 11

For an initial installation of Connecter, which of the following statements is TRUE?

（A）It is possible to run the First Time Wizard from Expert Mode on the Connecter server.

（B）It is not possible to use the sysconfig and cpconfig utilities, until the First Time Wizard in the Administration Web GUI is successfully completed.

（C）You must configure the Connecter username and password before running the First Time Wizard.

（D）It is not necessary to set up the Rule Base before completing Connector's installation.

正解：B 解答を投票する

質問 12

What is used to validate a digital certificate?

（A）IPsec

（B）PKCS

（C）S/MIME

（D）CRL

正解：D 解答を投票する

質問 13

The following diagram illustrates how a VPN-1 SecureClient user tries to establish a VPN with hosts in the external_net and internal_net from the Internet.
How is the Security Gateway VPN Domain created?

（A）Internal Gateway VPN Domain = internal_net.External Gateway VPN Domain = external_net + internal gateway object

（B）Internal Gateway VPN Domain = internal_net;External VPN Domain = external net + external gateway object + internal_net.

（C）Internal Gateway VPN Domain = internal_net;External Gateway VPN Domain = internal_net + external_net

（D）Internal Gateway VPN Domain = internal_net.External Gateway VPN Domain = internal VPN Domain + internal gateway object + external_net

正解：D 解答を投票する

質問 14

CORRECT TEXT
Fill in the blank with a numeric value. The default port number for Secure Sockets Layer (SSL) connections with the LDAP Server is

正解：

636

質問 15

Given the following protection detailed and the enforcing gateways list, is the Tool many DNS queries with the RD flag set protection enabled on the Gateway R76?

Please choose the answer with the correct justification.

（A）No because the protection is only supported on IPS-1 Sensor.

（B）No enough information to determine one way or other.

（C）No, because the Too many DNS queries with the flag set protection is not a valid protection in R76.

（D）yes because it is set to prevent on the Default_Protection, which R76 gateway has applied.

正解：A 解答を投票する

質問 16

Which of the following is NOT an internal/native Check Point command?

（A）fwaccel on

（B）tcpdump

（C）fw ctl debug

（D）cphaprob

正解：B 解答を投票する

質問 17

Remote clients are using IPSec VPN to authenticate via LDAP server to connect to the organization. Which gateway process is responsible for the authentication?

（A）fwd

（B）cvpnd

（C）fwm

（D）vpnd

正解：D 解答を投票する

質問 18

A SmartProvisioning Gateway could be a member of which VPN communities?
1 ) Center in Star Topology
2 ) Satellite in Star Topology
3 ) Center in Remote Access Community
4 ) Meshed Community

（A）2 and 3

（B）All

（C）1, 2 and 3

（D）2 only

正解：A 解答を投票する

質問 19

SmartProvisioning uses different types of profiles to manage and provision the gateways.
These types are:

（A）SmartLSM Security Profiles and SmartDashboard Profiles

（B）SmartLSM Security Profiles and Provisioning Profiles

（C）Provisioning Profiles and Gateways Profiles

（D）SmartConsole Profiles and SmartFilter Profiles

正解：B 解答を投票する

156-315.77 無料問題集「CheckPoint Check Point Certified Security Expert」

弊社を連絡する

関連リンク

トップ試験