156-315.80無料問題集「CheckPoint Check Point Certified Security Expert

質問 1

Automatic affinity means that if SecureXL is running, the affinity for each interface is automatically reset every

（A）60 sec

（B）30 sec

（C）15 sec

（D）5 sec

正解：A 解答を投票する

質問 2

What are the two high availability modes?

（A）New and Legacy

（B）Traditional and New

（C）Active and Standby

（D）Load Sharing and Legacy

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

Which command lists all tables in Gaia?

（A）fw tab -list

（B）fw tab -1

（C）fw-tab -s

（D）fw tab -t

正解：C 解答を投票する

質問 4

VPN Link Selection will perform the following when the primary VPN link goes down?

（A）The Firewall will inform the client that the tunnel is down.

（B）The Firewall will send out the packet on all interfaces.

（C）The Firewall will drop the packets.

（D）The Firewall can update the Link Selection entries to start using a different link for the same tunnel.

正解：D 解答を投票する

質問 5

In which VPN community is a satellite VPN gateway not allowed to create a VPN tunnel with another satellite VPN gateway?

（A）Combined

（B）Star

（C）Meshed

（D）Pentagon

正解：B 解答を投票する

質問 6

What CLI utility runs connectivity tests from a Security Gateway to an AD domain controller?

（A）test_connectivity_ad -d <domain>

（B）ad_connectivity_test -d <domain>

（C）test_ldap_connectivity -d <domain>

（D）test_ad_connectivity -d <domain>

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

What statement best describes the Proxy ARP feature for Manual NAT in R80.10?

（A）Translate Destination on Client Side should be configured

（B）Automatic proxy ARP configuration can be enabled

（C）local.arp file must always be configured

（D）fw ctl proxy should be configured

正解：C 解答を投票する

質問 8

With MTA (Mail Transfer Agent) enabled the gateways manages SMTP traffic and holds external email with potentially malicious attachments. What is required in order to enable MTA (Mail Transfer Agent) functionality in the Security Gateway?

（A）Traffic on port 25

（B）Threat Cloud Intelligence

（C）Threat Prevention Software Blade Package

（D）Endpoint Total Protection

正解：C 解答を投票する

質問 9

Due to high CPU workload on the Security Gateway, the security administrator decided to purchase a new CPU to replace the existing single core CPU. After installation, is the administrator required to perform any additional tasks?

（A）Go to clash-Run cpconfig | Configure CoreXL to make use of the additional Cores | Exit cpconfig | Reboot Security Gateway | Install Security Policy

（B）Go to clash-Run cpstop | Run cpstart

（C）Administrator does not need to perform any task. Check Point will make use of the newly installed CPU and Cores

（D）Go to clash-Run cpconfig | Configure CoreXL to make use of the additional Cores | Exit cpconfig | Reboot Security Gateway

正解：D 解答を投票する

質問 10

Which of the following is NOT an alert option?

（A）User defined alert

（B）High alert

（C）Mail

（D）SNMP

正解：B 解答を投票する

質問 11

To help SmartEvent determine whether events originated internally or externally you must define using the Initial Settings under General Settings in the Policy Tab. How many options are available to calculate the traffic direction?

（A）5 Network; Host; Objects; Services; API

（B）2 Internal; External

（C）3 Incoming; Outgoing; Network

（D）4 Incoming; Outgoing; Internal; Other

正解：D 解答を投票する

質問 12

What command is used to manually failover a cluster during a zero downtime upgrade?

（A）set clusterXL down

（B）set cluster member down

（C）cpstop

（D）clusterXL_admin down

正解：D 解答を投票する

質問 13

To accelerate the rate of connection establishment, SecureXL groups all connection that match a particular service and whose sole differentiating element is the source port. The type of grouping enables even the very first packets of a TCP handshake to be accelerated. The first packets of the first connection on the same service will be forwarded to the Firewall kernel which will then create a template of the connection. Which of the these is NOT a SecureXL template?

（A）Drop Template

（B）NAT Template

（C）Accept Template

（D）Deny Template

正解：D 解答を投票する

156-315.80 無料問題集「CheckPoint Check Point Certified Security Expert - R80」

弊社を連絡する

関連リンク

トップ試験