156-215.81問題集、CheckPoint実際の試験問題

質問 1

In the Check Point three-tiered architecture, which of the following is NOT a function of the Security Management Server?

A. Display policies and logs on the administrator's workstation.

B. Processing and sending alerts such as SNMP traps and email notifications.

C. Store firewall logs to hard drive storage.

D. Verify and compile Security Policies.

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 2

What is the purpose of the CPCA process?

A. Monitoring the status of processes

B. Sending and receiving logs

C. Generating and modifying certificates

D. Communication between GUI clients and the SmartCenter server

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 3

Vanessa is attempting to log into the Gaia Web Portal. She is able to login successfully. Then she tries the same username and password for SmartConsole but gets the message in the screenshot image below. She has checked that the IP address of the Server is correct and the username and password she used to login into Gaia is also correct.

What is the most likely reason?

A. Check Point Management software authentication details are not automatically the same as the Operating System authentication details. Check that she is using the correct details.

B. SmartConsole Authentication is not allowed for Vanessa until a Super administrator has logged in first and cleared any other administrator sessions.

C. Authentication failed because Vanessa's username is not allowed in the new Threat Prevention console update checks even though these checks passed with Gaia.

D. Check Point R80 SmartConsole authentication is more secure than in previous versions and Vanessa requires a special authentication key for R80 SmartConsole. Check that the correct key details are used.

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 4

From the Gaia web interface, which of the following operations CANNOT be performed on a Security Management Server?

A. Verify a Security Policy

B. Open a terminal shell

C. View Security Management GUI Clients

D. Add a static route

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 5

Which of the following is used to initially create trust between a Gateway and Security Management Server?

A. Certificate

B. Token

C. Internal Certificate Authority

D. One-time Password

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 6

Examine the sample Rule Base.

What will be the result of a verification of the policy from SmartConsole?

A. Verification Error. Rule 7 (Clean-Up Rule) hides Implicit Clean-up Rule

B. Verification Error. Empty Source-List in Rule 5 (Mail Inbound)

C. No errors or Warnings

D. Verification Error. Rule 4 (Web Inbound) hides Rule 6 (Webmaster access)

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 7

After a new Log Server is added to the environment and the SIC trust has been established with the SMS what will the gateways do?

A. Gateways will send new firewall logs to the new Log Server as soon as the SIC trust is set up between the SMS and the new Log Server.

B. The firewalls will detect the new Log Server after the next policy install and redirect the new logs to the new Log Server.

C. The gateways can only send logs to an SMS and cannot send logs to a Log Server. Log Servers are proprietary log archive servers.

D. Logs are not automatically forwarded to a new Log Server. SmartConsole must be used to manually configure each gateway to send its logs to the server.

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 8

You have created a rule at the top of your Rule Base to permit Guest Wireless access to the Internet.
However, when guest users attempt to reach the Internet, they are not seeing the splash page to accept your Terms of Service, and cannot access the Internet. How can you fix this?

A. In the Captive Portal screen of Global Properties, check "Enable Identity Captive Portal"

B. On the Security Management Server object, check the box "Identity Logging"

C. Right click Accept in the rule, select "More", and then check "Enable Identity Captive Portal"

D. On the firewall object, Legacy Authentication screen, check "Enable Identity Captive Portal"

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 9

Fill in the blank: Authentication rules are defined for ____________.

A. All users in the database

B. User groups

C. Individual users

D. Users using UserCheck

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 10

Which of the following commands is used to verify license installation?

A. Cplic show

B. Cplic license

C. Cplic print

D. Cplic verify license

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 11

In what way is Secure Network Distributor (SND) a relevant feature of the Security Gateway?

A. SND is used to distribute packets among Firewall instances

B. SND is a feature to accelerate multiple SSL VPN connections

C. SND is a feature of fw monitor to capture accelerated packets

D. SND is an alternative to IPSec Main Mode, using only 3 packets

正解: A

解説: (PassTest メンバーにのみ表示されます)

CheckPoint Check Point Certified Security Administrator R81 - 156-215.81 模擬練習