156-315.77問題集、CheckPoint実際の試験問題

質問 1

Your current VPN-1 NG with Application Intelligence (AI) R55 stand-alone VPN-1 Pro Gateway and SmartCenter Server runs on SecurePlatform.
You plan to implement VPN-1 NGX R65 in a distributed environment, where the new machine will be the SmartCenter Server, and the existing machine will be the VPN-1 Pro Gateway only.
You need to migrate the NG with AI R55 SmartCenter Server configuration, including licensing.
How do you handle licensing for this NGX R65 upgrade?

A. Request an NGX R65 SmartCenter Server license, using the existing gateway machine's IP address. Request a new local license for the NGX R65 VPN-1 Gateway using the new server's IP address.

B. Request an NGX R65 SmartCenter Server license, using the new server's IP address.
Request a new central NGX R65 VPN-1 Gateway license for the existing gateway server's IP address.

C. Request an NGX R65 SmartCenter Server license, using the new server's IP address.
Request a new central NGX R65 VPN-1 Gateway license also licensed to the new SmartCenter Server's IP address.

D. Leave the current license on the gateway to be upgraded during the software upgrade.
Purchase a new license for the VPN-1 NGX R65 SmartCenter Server.

正解: C

質問 2

You want only RAS signals to pass through H.323 Gatekeeper and other H.323 protocols, passing directly between end points.
Which routing mode in the VoIP Domain Gatekeeper do you select?

A. Call Setup and Call Control

B. Call Setup

C. Direct

D. Direct and Call Setup

正解: C

質問 3

You are trying to configure Directional VPN Rule Match in the Rule Base. But the Match column does not have the option to see the Directional Match. You see the following window. What must you enable to see the Directional Match?
Exhibit:

A. directional_match (true) in the objects_5_0.C file on Security Management Server

B. VPN Directional Match on the Gateway object's VPN tab

C. Advanced Routing on each Security Gateway

D. VPN Directional Match on the VPN advanced window, in Global Properties

正解: D

質問 4

Your organization has many VPN-1 Edge gateways at various branch offices, to allow VPN-1 Secure Client users to access company resources. For security reasons, your organization's Security Policy requires all Internet traffic initiated behind the VPN-1 Edge gateways first be inspected by your headquarters' VPN-1 Pro Security Gateway.
How do you configure VPN routing in this star VPN Community?

A. To the center; or through the center to other satellites, then to the Internet and other VPN targets

B. To the Internet and other targets only

C. To the center and other satellites, through the center

D. To the center only

正解: A

質問 5

To help organize events, SmartReporter uses filtered queries. Which of the following is NOT an SmartEvent event property you can query?

A. TimE. Last Hour, Last Day, Last Week

B. Event: Critical, Suspect, False Alarm

C. StatE. Open, Closed, False Alarm

D. TypE. Scans, Denial of Service, Unauthorized Entry

正解: B

質問 6

SSL termination takes place:

A. In a LAN deployment on a Security Gateway

B. In a DMZ and LAN deployment scenario on a Security Gateway

C. In a DMZ deployment on a Connecter Gateway

D. In a DMZ and LAN deployment scenario on a Connecter Gateway

正解: B

質問 7

In a distributed VPN-1 Pro NGX environment, where is the Internal Certificate Authority (ICA) installed?

A. On the Smart View Monitor

B. On the primary SmartCenter Server

C. Certificate Manager Server

D. On the Security Gateway

E. On the Policy Server

正解: B

質問 8

Jacob is using a mesh VPN Community to create a site-to-site VPN. The VPN properties in this mesh Community display in this graphic:

Which of the following statements is TRUE?

A. If Jacob changes the setting "Perform IPSec data encryption with" from "AES-128" to
"3DES", he will increase the encryption overhead.

B. Jacob must change the data integrity settings for this VPN Community. MD5 is incompatible with AES.

C. Jacob's VPN Community will perform IKE Phase 1 key-exchange encryption, using the longest key VPN-1 NGX supports.

D. If Jacob changes the setting, "Perform key exchange encryption with" from "3DES" to
"DES", he will enhance the VPN Community's security and reduce encryption overhead.

正解: A

質問 9

In Company XYZ, the DLP Administrator defined a new template Data Type that is based on an empty PDF form for an insurance claim.
Which of the following statements about this new data type are CORRECT?

A. Only completed insurance claim forms of PDF file-type that were based on the empty PDF form will be matched by this Data Type.

B. The Data Type will match only files where the name and file size is similar to that of the original insurance claim forms in PDF format.

C. If the empty PDF insurance claim form is sent, it will NOT be matched by this Data Type.

D. Word, Excel, PDF filled in insurance claim forms that were based on the empty PDF insurance claim form will be matched by this Data Type.

正解: D

質問 10

Identify the correct step performed by SmartUpdate to upgrade a remote Security Gateway.

A. After selecting "Packages > Distribute..." and choosing the target gateway, the selected package is copied from the Package Repository on the SmartCenter to the Security Gateway but the installation IS NOT performed.

B. After selecting "Packages > Distribute..." and choosing the target gateway, the selected package is copied from the CDROM of the SmartUpdate PC directly to the Security Gateway and the installation IS performed.

C. After selecting "Packages > Distribute..." and choosing the target gateway, the selected package is copied from the Package Repository on the SmartCenter to the Security Gateway and the installation IS performed.

D. After selecting "Packages > Distribute..." and choosing the target gateway, the SmartUpdate wizard walks the Administrator through a Distributed Installation.

正解: A

質問 11

Which specific R77 GUI would you use to view the length of time a TCP connection was open?

A. SmartReporter

B. SmartView Monitor

C. SmartView Tracker

D. SmartView Status

正解: C

質問 12

Where do you verify that Smart Directory is enabled?

A. Gateway properties> Smart Directory (LDAP) > Use Smart Directory(LDAP) for Security Gateways is checked

B. Gateway properties > Authentication> Use Smart Directory(LDAP) for Security Gateways is checked

C. Global properties > Authentication> Use Smart Directory(LDAP) for Security Gateways is checked

D. Global properties > Smart Directory (LDAP) > Use Smart Directory(LDAP) for Security Gateways is checked

正解: D

質問 13

Which of the following components contains the Events Data Base?

A. SmartEvent Server

B. SmartEvent Correlation Unit

C. SmartEvent Data Server

D. SmartEvent Client

正解: A

質問 14

Mark the configuration options that are available for Data Loss Prevention in R71.

A. A Dedicated DLP Gateway running only the DLP Software Blade.

B. The DLP Gateway running only the Management Server on the same machine.

C. The DLP as an integrated software blade which can be enabled on a Check Point Security Gateway running other software blades such as firewall, IPS and Management.

D. The DLP Gateway running only the Firewall Software Blade

正解: A

質問 15

What are the Smart Provisioning Policy Status indicators?

A. OK, Waiting, Out of Sync, Not Installed, Not communicating

B. OK, Down, Up, Synchronized

C. OK, Unknown, Not Installed, May be out of date

D. OK, Waiting, Unknown, Not Installed, Not Updated, May be out of date

正解: D

CheckPoint Check Point Certified Security Expert - 156-315.77 模擬練習