最新的CheckPoint 156-215-75免費考試真題

問題1

Once installed, the R75 kernel resides directly below which OSI model layer? NotE. Application is the top and Physical is the bottom of the IP stack.

A. Network

B. Transport

C. Data Link

D. Session

正確答案: A

問題2

Which set of objects have an Authentication tab?

A. Users, User Groups

B. Networks. Hosts

C. Templates, Users

D. Users, Networks

正確答案: C

問題3

When using the Captive Portal to authenticate users for Identity Awareness, the Security Gateway sends unidentified users to a Web Portal for authentication. What is not a recommended usage of this method?

A. Basic identity enforcement in the internal network

B. For deployment of Identity Agents

C. Identity based enforcement for non-AD users (non-Windows and guest users)

D. Leveraging identity in Internet application control

正確答案: A

問題4

Your shipping company uses a custom application to update the shipping distribution database. The custom application includes a service used only to notify remote sites that the distribution database is malfunctioning. The perimeter Security Gateway's Rule Base includes a rule to accept this traffic. Since you are responsible for multiple sites, you want notification by a text message to your cellular phone, whenever traffic is accepted on this rule. Which of the following would work BEST for your purpose?

A. Logging implied rules

B. SmartView Monitor Threshold

C. SNMP trap

D. User-defined alert script

正確答案: D

問題5

Which Check Point address translation method is necessary if you want to connect from a host on the Internet via HTTP to a server with a reserved (RFC 1918) IP address on your DMZ?

A. Hide Address Translation

B. Port Address Translation

C. Static Destination Address Translation

D. Dynamic Source Address Translation

正確答案: C

問題6

You want to configure a mail alert for every time the policy is installed to a specific Gateway. Where would you configure this alert?

A. In SmartView Monitor, select Gateway > Configure Thresholds and in SmartDashboard Select Global Properties > Log and alerts > Alert Commands.

B. In SmartView Monitor, select Gateway > Configure Thresholds.

C. You cannot create a mail alert for Policy installation

D. In SmartDashboard, select Global Properties > Log and Alerts > Alert Commands.

正確答案: A

問題7

In SmartDashboard, you configure 45 MB as the required free hard-disk space to accommodate logs. What can you do to keep old log files, when free space falls below 45 MB?

A. Do nothing. The Security Management Server automatically copies old logs to a backup server before purging.

B. Do nothing. Old logs are deleted, until free space is restored.

C. Configure a script to run fw logswitch and SCP the output file to a separate file server.

D. Use the fwm logexport command to export the old log files to another location.

正確答案: C

問題8

How does the Get Address button, found on the Host Node Object > General Properties page retrieve the address?

A. Route Table

B. SNMP Get

C. Name resolution (hosts file, DNS, cache)

D. Address resolution (ARP. RARP)

正確答案: C

問題9

The command fw fetch causes the:

A. Security Management Server to retrieve the debug logs of the target Security Gateway

B. Security Gateway to retrieve the compiled policy and inspect code from the Security Management Server and install it to the kernel.

C. Security Gateway to retrieve the user database information from the tables on the Security Management Server

D. Security Management Server to retrieve the IP addresses of the target Security Gateway.

正確答案: B

問題10

You just installed a new Web server in the DMZ that must be reachable from the Internet. You create a manual Static NAT rule as follows:
"web_public_IP" is the node object that represents the public IP address of the new Web server. "web_private_IP" is the node object that represents the new Web site's private IP address. You enable all settings from Global Properties > NAT.
When you try to browse the Web server from the Internet you see the error "page cannot be displayed". Which of the following is NOT a possible reason?

A. There is no route defined on the Security Gateway for the public IP address to the private IP address of the Web server.

B. There is no NAT rule translating the source IP address of packets coming from the protected Web server.

C. There is no Security Policy defined that allows HTTP traffic to the protected Web server.

D. There is no ARP table entry for the public IP address of the protected Web server.

正確答案: B

問題11

Which type of R75 Security Server does not provide User Authentication?

A. FTP Security Server

B. HTTP Security Server

C. HTTPS Security Server

D. SMTP Security Server

正確答案: D

問題12

Which statement below describes the most correct strategy for implementing a Rule Base?

A. Place a network-traffic rule above the administrator access rule.

B. Place the most frequently used rules at the top of the Policy and the ones that are not frequently used further down.

C. Umit grouping to rules regarding specific access.

D. Add the Stealth Rule before the last rule.

正確答案: B

問題13

Identity Awareness is implemented to manage access to protected resources based on a user's _____________.

A. Computer MAC address

B. Location

C. Application requirement

D. Time of connection

正確答案: C

問題14

In a Hide NAT connection outbound, which portion of the packet is modified?

A. Source IP address and destination port

B. Destination IP address and destination port

C. Source IP address and source port

D. Destination IP address and destination port

正確答案: C

最新的CheckPoint Check Point Certified Security Administrator R75 - 156-215-75免費考試真題

聯系我們

站內鏈接

最新更新