156-215.77問題集、CheckPoint実際の試験問題

質問 1

You have detected a possible intruder listed in SmartView Tracker's active pane. What is the fastest method to block this intruder from accessing your network indefinitely?

A. Modify the Rule Base to drop these connections from the network.

B. In SmartView Monitor, select Tools > Suspicious Activity Rules.

C. In SmartDashboard, select IPS > Network Security > Denial of Service.

D. In SmartView Tracker, select Tools > Block Intruder.

正解: D

質問 2

Your company is running Security Management Server R77 on GAiA, which has been migrated through each version starting from Check Point 4.1.
How do you add a new administrator account?

A. Using the Web console on GAiA under Product configuration, select Administrators

B. Using cpconfig on the Security Management Server, choose Administrators

C. Using SmartDashboard, under Users, select Add New Administrator

D. Using SmartDashboard or cpconfig

正解: C

質問 3

You are the Security Administrator for MegaCorp. In order to see how efficient your firewall Rule Base is, you would like to see how often the particular rules match. Where can you see it? Give the BEST answer.

A. In the SmartView Tracker, if you activate the column Matching Rate.

B. In SmartReporter, in the section Firewall Blade - Activity > Network Activity with information concerning Top Matched Logged Rules.

C. It is not possible to see it directly. You can open SmartDashboard and select UserDefined in the Track column. Afterwards, you need to create your own program with an external counter.

D. SmartReporter provides this information in the section Firewall Blade - Security > Rule Base Analysis with information concerning Top Matched Logged Rules.

正解: D

質問 4

When using AD Query to authenticate users for Identity Awareness, identity data is received seamlessly from the Microsoft Active Directory (AD). What is NOT a recommended usage of this method?

A. Leveraging identity in the application control blade

B. Basic identity enforcement in the internal network

C. Identity-based enforcement for non-AD users (non-Windows and guest users)

D. Identity-based auditing and logging

正解: C

質問 5

Which utility allows you to configure the DHCP service on GAiA from the command line?

A. dhcp_cfg

B. ifconfig

C. sysconfig

D. cpconfig

正解: C

質問 6

Which of the following is a viable consideration when determining Rule Base order?

A. Adding SAM rules at the top of the Rule Base

B. Placing frequently accessed rules before less frequently accessed rules

C. Grouping IPS rules with dynamic drop rules

D. Grouping rules by date of creation

正解: B

質問 7

An Administrator without access to SmartDashboard installed a new IPSO-based R77 Security Gateway over the weekend. He e-mailed you the SIC activation key and the IP address of the Security Gateway. You want to confirm communication between the Security Gateway and the Management Server by installing the Policy. What might prevent you from installing the Policy?

A. You first need to run the command fw unloadlocal on the R77 Security Gateway appliance in order to remove the restrictive default policy.

B. You first need to create a new Gateway object in SmartDashboard, establish SIC via the Communication button, and define the Gateway's topology.

C. An intermediate local Security Gateway does not allow a policy install through it to the remote new Security Gateway appliance. Resolve by running the command fw unloadlocal on the local Security Gateway.

D. You have not established Secure Internal Communications (SIC) between the Security Gateway and Management Server. You must initialize SIC on the Security Management Server.

正解: B

質問 8

A snapshot delivers a complete GAiA backup. The resulting file can be stored on servers or as a local file in /var/CPsnapshot/snapshots. How do you restore a local snapshot named MySnapshot.tgz?

A. As expert user, type the command revert --file MySnapshot.tgz.

B. Reboot the system and call the start menu. Select the option Snapshot Management, provide the Expert password and select [L] for a restore from a local file. Then, provide the correct file name.

C. As expert user, type the command snapshot - R to restore from a local file. Then, provide the correct file name.

D. As expert user, type the command snapshot -r MySnapshot.tgz.

正解: A

質問 9

Which set of objects have an Authentication tab?

A. Users, User Groups

B. Networks, Hosts

C. Users, Networks

D. Templates, Users

正解: D

質問 10

When using LDAP as an authentication method for Identity Awareness, the query:

A. Prompts the user to enter credentials.

B. Requires client and server side software.

C. Requires administrators to specifically allow LDAP traffic to and from the LDAP Server and the Security Gateway.

D. Is transparent, requiring no client or server side software, or client intervention.

正解: D

CheckPoint Check Point Certified Security Administrator - 156-215.77 模擬練習