最新的CheckPoint 156-215.77免費考試真題

問題1

Which tool CANNOT be launched from SmartUpdate R77?

A. snapshot

B. IP Appliance Voyager

C. cpinfo

D. GAiA WebUI

正確答案: A

問題2

Review the rules.

Assume domain UDP is enabled in the impled rules.
What happens when a user from the internal network tries to browse to the internet using HTTP? The user:

A. is prompted three times before connecting to the Internet successfully.

B. can connect to the Internet successfully after being authenticated.

C. can go to the Internet after Telnetting to the client authentication daemon port 259.

D. can go to the Internet, without being prompted for authentication.

正確答案: D

問題3

If a Security Gateway enforces three protections, LDAP Injection, Malicious Code Protector, and Header Rejection, which Check Point license is required in SmartUpdate?

A. SmartEvent Intro

B. SSL: VPN

C. IPS

D. Data Loss Prevention

正確答案: C

問題4

Users with Identity Awareness Agent installed on their machines login with __________, so that when the user logs into the domain, that information is also used to meet Identity Awareness credential requests.

A. SecureClient

B. Key-logging

C. Single Sign-On

D. ICA Certificates

正確答案: C

問題5

Your company's Security Policy forces users to authenticate to the Gateway explicitly, before they can use any services. The Gateway does not allow the Telnet service to itself from any location. How would you configure authentication on the Gateway? With a:

A. Client Authentication rule using the manual sign-on method, using HTTP on port 900

B. Client Authentication rule, using partially automatic sign on

C. Session Authentication rule

D. Client Authentication for fully automatic sign on

正確答案: A

問題6

You have a diskless appliance platform. How do you keep swap file wear to a minimum?

A. Use PRAM flash devices, eliminating the longevity.

B. Issue FW-1 bases its package structure on the Security Management Server, dynamically loading when the firewall is booted.

C. The external PCMCIA-based flash extension has the swap file mapped to it, allowing easy replacement.

D. A RAM drive reduces the swap file thrashing which causes fast wear on the device.

正確答案: D

問題7

The INSPECT engine inserts itself into the kernel between which two OSI model layers?

A. Session and Transport

B. Presentation and Application

C. Datalink and Network

D. Physical and Data

正確答案: C

問題8

Which of the following is a viable consideration when determining Rule Base order?

A. Placing more restrictive rules before more permissive rules

B. Grouping authentication rules with QOS rules

C. Grouping IPS rules with dynamic drop rules

D. Grouping reject and drop rules after the Cleanup Rule

正確答案: A

問題9

The technical-support department has a requirement to access an intranet server. When configuring a User Authentication rule to achieve this, which of the following should you remember?

A. You can limit the authentication attempts in the User Properties' Authentication tab.

B. Once a user is first authenticated, the user will not be prompted for authentication again until logging out.

C. You can only use the rule for Telnet, FTP, SMTP, and rlogin services.

D. The Security Gateway first checks if there is any rule that does not require authentication for this type of connection before invoking the Authentication Security Server.

正確答案: D

問題10

SmartUpdate is mainly for which kind of work -
1 . Monitoring Performance and traffic
2 . Provision Package
3 . Managing licenses
4. Creating a Rule Base

A. 2, 3

B. 1, 2

C. 2, 4

D. 1, 3

正確答案: A

問題11

One of your remote Security Gateway's suddenly stops sending logs, and you cannot install the Security Policy on the Gateway. All other remote Security Gateways are logging normally to the Security Management Server, and Policy installation is not affected. When you click the Test SIC status button in the problematic Gateway object, you receive an error message. What is the problem?

A. The Internal Certificate Authority for the Security Management Server object has been removed from objects_5_0.C.

B. There is no connection between the Security Management Server and the remote Gateway. Rules or routing may block the connection.

C. The remote Gateway's IP address has changed, which invalidates the SIC Certificate.

D. The time on the Security Management Server's clock has changed, which invalidates the remote Gateway's Certificate.

正確答案: B

問題12

Choose the SmartLog property that is TRUE.

A. SmartLog is not a Check Point product.

B. SmartLog has been an option since release R71.10.

C. SmartLog is a client of SmartConsole that enables enterprises to centrally track log records and security activity with Google-like search.

D. SmartLog and SmartView Tracker are mutually exclusive.

正確答案: C

最新的CheckPoint Check Point Certified Security Administrator - 156-215.77免費考試真題

聯系我們

站內鏈接

最新更新