156-215.76問題集、CheckPoint実際の試験問題

質問 1

Many companies have defined more than one administrator. To increase security, only one administrator should be able to install a Rule Base on a specific Firewall. How do you configure this?

A. Define a permission profile in SmartDashboard with read/write privileges, but restrict it to all other firewalls by placing them in the Policy Targets field. Then, an administrator with this permission profile cannot install a policy on any Firewall not listed here.

B. Put the one administrator in an Administrator group and configure this group in the specific Firewall object in Advanced > Permission to Install.

C. In the object General Properties representing the specific Firewall, go to the Software Blades product list and select Firewall. Right-click in the menu, select Administrator to Install to define only this administrator.

D. Right-click on the object representing the specific administrator, and select that Firewall in Policy Targets.

正解: B

質問 2

How can you reset the Security Administrator password that was created during initial Security Management Server installation on SecurePlatform?

A. Type cpm -a, and provide the existing administrator's account name. Reset the Security Administrator's password.

B. Export the user database into an ASCII file with fwm dbexport. Open this file with an editor, and delete the Password portion of the file. Then log in to the account without a password. You will be prompted to assign a new password.

C. As expert user Type fwm -a, and provide the existing administrator's account name. Reset the Security Administrator's password.

D. Launch SmartDashboard in the User Management screen, and edit the cpconfig administrator.

正解: C

質問 3

How can you activate the SNMP daemon on a Check Point Security Management Server?

A. Any of these options will work.

B. Using the command line, enter snmp_install.

C. From cpconfig, select SNMP extension.

D. In SmartDashboard, right-click a Check Point object and select Activate SNMP.

正解: C

質問 4

You enable Hide NAT on the network object, 10.1.1.0 behind the Security Gateway's external interface. You browse to from host, 10.1.1.10 successfully. You enable a log on the rule that allows 10.1.1.0 to exit the network. How many log entries do you see for that connection in SmartView Tracker?

A. Only one, inbound

B. Two, one for outbound, one for inbound

C. Only one, outbound

D. Two, both outbound, one for the real IP connection and one for the NAT IP connection

正解: C

質問 5

You are the Security Administrator for MegaCorp and would like to view network activity using SmartReporter. You select a standard predefined report. As you can see here, you can select the london Gateway.

When you attempt to configure the Express Report, you are unable to select this Gateway.

What is the reason for this behavior? Give the BEST answer.

A. You must enable the Express Mode inside Eventia Reporter.

B. You must enable the Eventia Express Mode on the london Gateway.

C. You must enable Monitoring in the london Gateway object's General Properties.

D. You have the license for Eventia Reporter in Standard mode only.

正解: C

質問 6

Which of the following methods is NOT used by Identity Awareness to catalog identities?

A. Captive Portal

B. AD Query

C. Identity Agent

D. GPO

正解: D

質問 7

Which authentication type requires specifying a contact agent in the Rule Base?

A. Client Authentication with Partially Automatic Sign On

B. Client Authentication with Manual Sign On

C. User Authentication

D. Session Authentication

正解: D

質問 8

Which of the following tools is used to generate a Security Gateway R76 configuration report?

A. fw cpinfo

B. infoview

C. infoCP

D. cpinfo

正解: D

質問 9

Your boss wants you to closely monitor an employee suspected of transferring company secrets to the competition. The IT department discovered the suspect installed a WinSCP client in order to use encrypted communication. Which of the following methods is BEST to accomplish this task?

A. Watch his IP in SmartView Monitor by setting an alert action to any packet that matches your Rule Base and his IP address for inbound and outbound traffic.

B. Send the suspect an email with a keylogging Trojan attached, to get direct information about his wrongdoings.

C. Use SmartView Tracker to follow his actions by filtering log entries that feature the WinSCP destination port. Then, export the corresponding entries to a separate log file for documentation.

D. Use SmartDashboard to add a rule in the firewall Rule Base that matches his IP address, and those of potential targets and suspicious protocols. Apply the alert action or customized messaging.

正解: C

質問 10

Peter is your new Security Administrator. On his first working day, he is very nervous and enters the wrong password three times. His account is locked. What can be done to unlock Peter's account? Give the BEST answer.

A. It is not possible to unlock Peter's account. You have to install the firewall once again or abstain from Peter's help.

B. You can unlock Peter's account by using the command fwm lock_admin -u Peter on the Security Management Server.

C. You can unlock Peter's account by using the command fwm unlock_admin -u Peter on the Security Management Server

D. You can unlock Peter's account by using the command fwm unlock_admin -u Peter on the Security Gateway.

正解: B

質問 11

Which command enables IP forwarding on IPSO?

A. echo 0 > /proc/sys/net/ipv4/ip_forward

B. echo 1 > /proc/sys/net/ipv4/ip_forward

C. clish -c set routing active enable

D. ipsofwd on admin

正解: D

質問 12

All R76 Security Servers can perform authentication with the exception of one. Which of the Security Servers can NOT perform authentication?

A. HTTP

B. SMTP

C. FTP

D. RLOGIN

正解: B

質問 13

What is the officially accepted diagnostic tool for IP Appliance Support?

A. CST

B. ipsoinfo

C. cpinfo

D. uag-diag

正解: A

CheckPoint Check Point Certified Security Administrator - GAiA - 156-215.76 模擬練習