最新的CheckPoint 156-215.81.20免費考試真題

問題1

Which of the following is an identity acquisition method that allows a Security Gateway to identify Active Directory users and computers?

A. Account Unit Query

B. Active Directory Query

C. UserCheck

D. User Directory Query

正確答案: B

問題2

In R80 Management, apart from using SmartConsole, objects or rules can also be modified using:

A. A complete CLI and API interface using SSH and custom CPCode integration.

B. 3rd Party integration of CLI and API for Management prior to R80.

C. 3rd Party integration of CLI and API for Gateways prior to R80.

D. A complete CLI and API interface for Management with 3rd Party integration.

正確答案: A

問題3

Tom has connected to the Management Server remotely using SmartConsole and is in the process of making some Rule Base changes, when he suddenly loses connectivity. Connectivity is restored shortly afterward.
What will happen to the changes already made?

A. Tom's changes will be lost since he lost connectivity and he will have to start again.

B. Tom's changes will have been stored on the Management when he reconnects and he will not lose any of his work.

C. Tom will have to reboot his SmartConsole computer, and access the Management cache store on that computer, which is only accessible after a reboot.

D. Tom will have to reboot his SmartConsole computer, clear the cache, and restore changes.

正確答案: B

問題4

DLP and Geo Policy are examples of what type of Policy?

A. Standard Policies

B. Shared Policies

C. Inspection Policies

D. Unified Policies

正確答案: B

問題5

True or False: More than one administrator can log into the Security Management Server with SmartConsole with write permission at the same time.

A. False, this feature has to be enabled in the Global Properties.

B. True, every administrator works on a different database that Is independent of the other administrators

C. False, only one administrator can login with write permission

D. True, every administrator works in a session that is independent of the other administrators

正確答案: D

問題6

A network administrator has informed you that they have identified a malicious host on the network, and instructed you to block it. Corporate policy dictates that firewall policy changes cannot be made at this time.
What tool can you use to block this traffic?

A. Anti-Bot protection

B. Anti-Malware protection

C. Policy-based routing

D. Suspicious Activity Monitoring (SAM) rules

正確答案: D

問題7

What is NOT an advantage of Stateful Inspection?

A. High Performance

B. No Screening above Network layer

C. Transparency

D. Good Security

正確答案: B

問題8

Which software blade does NOT accompany the Threat Prevention policy?

A. Application Control and URL Filtering

B. Anti-virus

C. IPS

D. Threat Emulation

正確答案: A

問題9

What is the purpose of a Clean-up Rule?

A. To drop any traffic that is not explicitly allowed.

B. Clean-up Rules do not server any purpose.

C. Provide a metric for determining unnecessary rules.

D. Used to better optimize a policy.

正確答案: A

問題10

To view statistics on detected threats, which Threat Tool would an administrator use?

A. ThreatWiki

B. Protections

C. IPS Protections

D. Profiles

正確答案: A

問題11

Name the authentication method that requires token authenticator.

A. TACACS

B. Radius

C. DynamicID

D. SecureID

正確答案: D

問題12

Full synchronization between cluster members is handled by Firewall Kernel.
Which port is used for this?

A. UDP port 256

B. TCP port 256

C. UDP port 265

D. TCP port 265

正確答案: D

最新的CheckPoint Check Point Certified Security Administrator R81.20 - 156-215.81.20免費考試真題

聯系我們

站內鏈接

最新更新