最新的CheckPoint 156-215.75免費考試真題

問題1

With the User Directory Software Blade, you can create R75 user definitions on a(n) _______Server.

A. Radius

B. NT Domain

C. LDAP

D. SecureID

正確答案: C

問題2

MegaCorp's security infrastructure separates Security Gateways geographically. You must request a central license for one remote Security Gateway. How do you apply the license?

A. Using the remote Gateway's IP address and applying the license locally with the cplic put command.

B. Using your Security Management Server's IP address, and attaching the license to the remote Gateway via SmartUpdate.

C. Using the remote Gateway's IP address, and attaching the license to the remote Gateway via SmartUpdate.

D. Using each of the Gateways' IP addresses, and applying the license on the Security Management Server with the cprlic put command.

正確答案: B

問題3

You are evaluating the configuration of a mesh VPN Community used to create a site-tosite VPN. This graphic displays the VPN properties in this mesh Community.

Which of the following would be the most valid conclusion?

A. Change the data-integrity settings for this VPN CommunitybecauseMD5 is incompatible with AES.

B. Changing the setting Perform key exchange encryption with 3DES to DES will enhance the VPN Community's security, and reduce encryption overhead.

C. The VPN Community will perform IKE Phase 1 key-exchange encryption using the longest key Security Gateway R75 supports.

D. Changing the setting Perform IPsec data encryption with from AES-128 to 3DES will increase the encryption overhead.

正確答案: D

問題4

John currently administers a network using single CPU single core servers for the Security Gateways and is running R75. His company is now going to implement VOIP and needs more performance on the Gateways. He is now adding more memory to the systems and also upgrades the CPU to a modern quad core CPU in the server. He wants to use CoreXL technology to benefit from the new performance benchmarks of this technology. How can he achieve this?

A. He needs to reinstall the Gateways because during the initial installation, it was a single-core CPU but the wrong Linux kernel was installed. There is no other upgrade path available.

B. He just needs to go to cpconfig on the CLI and enable CoreXL. Only a restart of the firewall is required to benefit from CoreXL technology.

C. He just needs to go to cpconfig on the CLI and enable CoreXL. After the required reboot he will benefit from the new technology.

D. Nothing needs to be done. SecurePlatform recognized the change during reboot and adjusted all the settings automatically.

正確答案: C

問題5

Which of the following commands can be used to remove site-to-site IPsec Security Association (SA)?

A. vpn tu

B. fw ipsec tu

C. vpn ipsec

D. vpn debug ipsec

正確答案: A

問題6

In previous versions, the full TCP three-way handshake was sent to the firewall kernel for inspection. How is this improved in the current version of IPSO Flows/SecureXL?

A. Only the initial SYN packet is inspected. The rest are handled by IPSO.

B. Packets are offloaded to a third-party hardware card for near-line inspection.

C. Packets are virtualized to a RAM drive-based FW VM.

D. Resources are proactively assigned using predictive algorithmic techniques.

正確答案: A

問題7

Which set of objects have an Authentication tab?

A. Users, User Groups

B. Networks. Hosts

C. Templates, Users

D. Users, Networks

正確答案: C

問題8

What are you required to do before running the command upgrade_export?

A. Close all GUI clients

B. Run a cpstop on the Security Gateway

C. Run a cpatop on the Security Management Server

D. Run cpconfig and set yourself up as a GUI client

正確答案: A

問題9

NAT can be implemented on which of the following lists of objects?

A. Domain, Network

B. Host, Network

C. Network, Dynamic Object

D. Host, User

正確答案: B

問題10

For VPN routing to succeed, what must be configured?

A. At least two rules in the Rule Base must be created, one to cover traffic inbound and the other to cover traffic outbound on the central (HUB) Security Gateway.

B. No rules need to be created; implied rules that cover inbound and outbound traffic on the central (HUB) Gateway are already in place from Policy > Properties > Accept VPN-1 Control Connections.

C. VPN routing is not configured in the Rule Base or Community objects. Only the native-routing mechanism on each Gateway can direct the traffic via its VTI configured interfaces.

D. A single rule in the Rule Base must cover all traffic on the central (HUB) Security Gateway for the VPN domain.

正確答案: D

最新的CheckPoint Check Point Certified Security Administrator R75 - 156-215.75免費考試真題

聯系我們

站內鏈接

最新更新