156-315.81.20 無料問題集「CheckPoint Check Point Certified Security Expert - R81.20」

（A）The SmartEvent Correlation Unit is designed to check the availability of the SmartReporter Server.

（B）The Correlation unit role is to evaluate logs from the log server component to identify patterns/threats and convert them to events.

（C）The SmartEvent Correlation Unit is designed to check the connection reliability from SmartConsole to the SmartEvent Server.

（D）The SmartEvent Correlation Unit's task it to assign severity levels to the identified events.

（A）Dynamic Objects are maintained automatically by the Threat Cloud. For Dynamic Objects there rs no need to install policy for the changes to take effect. Updatable Objects are created and maintained locally.

（B）Updatable Objects is a Threat Cloud Service. The provided Objects are updated automatically. Dynamic Objects are created and maintained locally In both cases there is no need to install policy for the changes to take effect.

（C）Dynamic Objects ate maintained automatically by the Threat Cloud. Updatable Objects are created and maintained locally. In both cases there is no need to install policy for the changes to take effect.

（D）Updatable Objects is a Threat Cloud Service. The provided Objects are updated automatically. Dynamic Objects are created and maintained locally For Dynamic Objects there is no need to install policy for the changes to take effect.

（A）The API is not running, the services shown by netstat are the gaia services. To start the API run 'api start'

（B）The API didn't run on the default port check it with api status' and add '-port 4434' to the mgmt_clt command.

（C）Wrong Management API Access setting^for Ihe client IP To correct it go to SmartConsole / Management & Settings / Blades / Management API and press "Advanced Settings..' and choose GUI clients or ALL IP's.

（D）The management permission in the user profile is mrssing. Go to SmartConsole / Management & Settings I Permissions & Administrators / Permission Profiles. Select the profile of the user and enable 'Management API Login' under Management Permissions

（A）SSL

（B）RSA

（C）Captive Portal

（D）PKI

（A）TCP 4433

（B）TCP 18211

（C）TCP 443

（D）TCP 257

（A）Name of the application, identity of the user, and identity of the machine

（B）Network location, identity of a user, and identity of a machine

（C）Browser-Based Authentication, identity of a user, and network location

（D）Identity of the machine, username, and certificate

（A）Application Control and URL Filtering

（B）Anti-virus

（C）IPS

（D）Threat Emulation

（A）Mobile Access license because he needs only a 50 user license, license count is per concurrent user.

（B）Because the customer uses only Windows clients SecuRemote will be sufficient and no additional license is needed

（C）He will need Harmony Endpoint because of the personal firewall.

（D）He will need Capsule Connect using MEP (multiple entry points).

（A）Application Dictionary

（B）AppWiki

（C）Application Library

（D）CPApp

（A）Management API, Threat Prevention API, Identity Awareness Web Services API and OPSEC SDK API

（B）Security Gateway API Management API, Threat Prevention API and Identity Awareness Web Services API

（C）CPMI API, Management API, Threat Prevention API and Identity Awareness Web Services API

（D）OSE API, OPSEC SDK API, Threat Extraction API and Policy Editor API

（A）Go to Application&url filtering blade > Https Inspection > Policy

（B）Go to Application&url filtering blade > Advanced > Https Inspection > Policy

（C）Go to Manage&Settings > Blades > HTTPS Inspection > Policy

（D）Go to Manage&Settings > Blades > HTTPS Inspection > Configure in SmartDashboard

（A）Use a group of bonded interfaces connected to different switches. Define a dedicated sync interface, only one interface per node using the SmartConsole / Gateways & Servers -> select Cluster Properties / Network Management.

（B）In the SmartConsole / Gateways & Servers -> select Cluster Properties / Network Management and define two Sync interfaces per node. Connect both Sync interfaces without using a switch.

（C）Use a group of bonded interfaces. In the SmartConsole / Gateways & Servers -> select Cluster Properties / Network Management and define a Virtual IP for the Sync interface.

（D）In the SmartConsole / Gateways & Servers -> select Cluster Properties / Network Management and define two Sync interfaces per node. Use two different Switches to connect both Sync interfaces.

（A）Never been synchronized

（B）Synchronized

（C）Lagging

（D）Collision

（A）Limits the upload and download throughput for streaming media in the company to 1 Gbps.

（B）Time object to a rule to make the rule active only during specified times.

（C）Sub Policies ae sets of rules that can be created and attached to specific rules. If the rule is matched, inspection will continue in the sub policy attached to it rather than in the next rule.

（D）The rule base can be built of layers, each containing a set of the security rules. Layers are inspected in the order in which they are defined, allowing control over the rule base flow and which security functionalities take precedence.

（A）Logging has disk space issues. Change logging storage options on the logging server or Security Management Server properties and install database.

（B）Data Awareness is not enabled.

（C）Identity Awareness is not enabled.

（D）Logs are arriving from Pre-R81 gateways.

（A）Three; security management, Security Gateway, and endpoint security

（B）Three; Security Gateway, endpoint security, and gateway management

（C）Two; endpoint security and Security Gateway

（D）Two; security management and endpoint security

（A）fwd

（B）fwm

（C）logd

（D）cpd

（A）packets sent to the cluster IP address are distributed equally between all members of the cluster

（B）only the primary member received packets sent to the cluster IP address

（C）only the secondary member receives packets sent to the cluster IP address

（D）every member of the cluster received all of the packets sent to the cluster IP address

（A）IPS, Anti-Bot, Anti-Virus, Threat Emulation and Threat Extraction

（B）IDS, Forensics, Anti-Virus, Sandboxing

（C）IPS, Threat Emulation and Threat Extraction

（D）IPS, Anti-Bot, Anti-Virus, SandBlast and Macro Extraction