156-115.80問題集、CheckPoint実際の試験問題

質問 1

The security administrator wants to verify if a specific connection is being handling by SecureXL. What command below is used to verify this information?

A. fwaccel conns

B. cpview

C. fwaccel stat

D. fw tab -t connections -f | grep <application ip>

正解: A

質問 2

How would you disable CPM debug?

A. Delete $FWDIR/log/tdlog.cpm file

B. Delete $FWDIR/log/fwm.elg file

C. Set the severity level to INFO and run cpm_debug.sh -r

D. Run fw debug cpm off TDERROR_ALL_ALL=0

正解: D

質問 3

What is the command to check the current status of hyper-threading?

A. fw ctl get int cphwd_hyper_status

B. cat/proc/hyperstats

C. fw ctl multik stat

D. cat/proc/smt_status

正解: D

質問 4

What process(es) should be checked if there is high I/O and you suspect it may be related to the Antivirus Software Blade?

A. cpm and fwm

B. dlpu and rad processes

C. cpta

D. avsp

正解: B

質問 5

The Security Gateway is installed on GAiA R80. The default port for the Web User Interface is
.

A. TCP 443

B. TCP 257

C. TCP 4433

D. TCP 18211

正解: A

質問 6

You have configured IPS Bypass Under Load function with additional kernel parameters:
ids_tolerance_no_stress=15 and ids_tolerance_stress=15. For configuration you used the "fw ctl set" command. After reboot you noticed that these parameters returned to their default values. What do you need to do to make this configuration work immediately and stay permanent?

A. Edit appropriate parameters in $FWDIR/boot/modules/fwkern.conf

B. Set these parameters again with "fw ctl set" and edit appropriate parameters in $FWDIR/boot/modules/ fwkern.conf

C. Use script $FWDIR/bin IpsSetBypass.sh to set these parameters

D. Set these parameters again with "fw ctl set" and save configuration with "save config"

正解: D

質問 7

Which of the following features is supported in Check Point's implementation of IPv6?

A. Security Servers

B. ClusterXL High Availability

C. SAM

D. QoS

正解: B

質問 8

The CPM process uses what ports?

A. 18265 and 257

B. 18265 and 9009

C. 19009 and 18120

D. 19009 and 9009

正解: D

質問 9

Which of the following ports are used for SIC?

A. 18210 and 18211

B. 18192 and 18193

C. 257 and 258

D. 18355 and 18356

正解: A

質問 10

You have configured SecureXL NAT templates with the "fw ctl set" command. You check configuration and ensure that NAT templates were enabled. After an accidental reboot, you issue "fwaccel stat" and noticed that NAT Templates are not enabled. You need to permanently enable SecureXL NAT templates. What should you do?

A. Enable NAT Templates again with "fw ctl set" and edit appropriate parameters in
$FWDIR/boot/modules/
fwkern.conf

B. Edit appropriate parameters in $FWDIR/boot/modules/fwkern.conf

C. Set NAT Templates with "fwaccel templates NAT" command and save configuration with "save config"

D. Enable NAT Templates again with "fw ctl set" and save configuration with "save config"

正解: D

CheckPoint Check Point Certified Security Master - R80 - 156-115.80 模擬練習