156-315.81問題集、CheckPoint実際の試験問題

質問 1

When using CPSTAT, what is the default port used by the AMON server?

A. 18191

B. 18194

C. 18190

D. 18192

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 2

What Is the difference between Updatable Objects and Dynamic Objects

A. Dynamic Objects ate maintained automatically by the Threat Cloud. Updatable Objects are created and maintained locally. In both cases there is no need to install policy for the changes to take effect.

B. Updatable Objects is a Threat Cloud Service. The provided Objects are updated automatically.
Dynamic Objects are created and maintained locally In both cases there is no need to install policy for the changes to take effect.

C. Updatable Objects is a Threat Cloud Service. The provided Objects are updated automatically.
Dynamic Objects are created and maintained locally For Dynamic Objects
there is no need to install policy for the changes to take effect.

D. Dynamic Objects are maintained automatically by the Threat Cloud. For Dynamic Objects there rs no need to install policy for the changes to take effect. Updatable Objects are created and maintained locally.

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 3

Which of the following is a task of the CPD process?

A. Log forwarding

B. Transfers messages between Firewall processes

C. Invoke and monitor critical processes and attempts to restart them if they fail

D. Responsible for processing most traffic on a security gateway

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 4

In the Firewall chain mode FFF refers to:

A. All Packets

B. Stateless Packets

C. No Match

D. Stateful Packets

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 5

What is the main difference between Threat Extraction and Threat Emulation?

A. Threat Emulation never delivers a file that takes less than a second to complete.

B. Threat Extraction always delivers a file and takes less than a second to complete.

C. Threat Emulation never delivers a file and takes more than 3 minutes to complete.

D. Threat Extraction never delivers a file and takes more than 3 minutes to complete.

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 6

What is false regarding prerequisites for the Central Deployment usage?

A. The Security Gateway must have a policy installed

B. The administrator must have write permission on SmartUpdate

C. Security Gateway must have the latest CPUSE Deployment Agent

D. No need to establish SIC between gateways and the management server, since the CDT tool will take care about SIC automatically.

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 7

Mobile Access Gateway can be configured as a reverse proxy for Internal Web Applications Reverse proxy users browse to a URL that is resolved to the Security Gateway IP address. Which of the following Check Point command is true for enabling the Reverse Proxy:

A. ProxyReverseCLI

B. ReverseProxyCLI

C. ReverseProxy

D. ReverseCLIProxy

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 8

SmartEvent Security Checkups can be run from the following Logs and Monitor activity:

A. Reports

B. Advanced

C. Checkups

D. Views

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 9

The fwd process on the Security Gateway sends logs to the fwd process on the Management Server via which
2 processes?

A. fwd via cpm

B. fwm via fwd

C. fwd via cpd

D. cpm via cpd

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 10

identity Awareness allows easy configuration for network access, and auditing based on what three items?

A. Log server IP address

B. Client machine IP address

C. Gateway proxy IP address

D. Network location the identity of a user and the identity of a machine

正解: D

質問 11

In SmartConsole, where do you manage your Mobile Access Policy?

A. Shared Gateways Policy

B. Through the Mobile Console

C. From the Dedicated Mobility Tab

D. Smart Dashboard

正解: D

質問 12

Vanessa is firewall administrator in her company. Her company is using Check Point firewall on a central and several remote locations which are managed centrally by R77.30 Security Management Server. On central location is installed R77.30 Gateway on Open server. Remote locations are using Check Point UTM-1570 series appliances with R75.30 and some of them are using a UTM-1-Edge-X or Edge-W with latest available firmware. She is in process of migrating to R81.
What can cause Vanessa unnecessary problems, if she didn't check all requirements for migration to R81?

A. Unsupported version on UTM-1 570 series appliance

B. Unsupported appliances on remote locations

C. Missing an installed R77.20 Add-on on Security Management Server

D. Unsupported firmware on UTM-1 Edge-W appliance

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 13

What does the "unknown" SIC status shown on SmartConsole mean?

A. SIC activation key requires a reset

B. Administrator input the wrong SIC key

C. The management can contact the Security Gateway but cannot establish Secure Internal Communication

D. There is no connection between the Security Gateway and Security Management Server

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 14

Which Correction mechanisms are available with ClusterXL under R81.20?

A. Pre-Correction and SDF (Sticky Decision Function)

B. Dispatcher (Early Correction) and Firewall (Late Correction)

C. Correction Mechanisms are only available of Maestro Hyperscale Orchestrators

D. SDF (Sticky Decision Function) and Flush and ACK

正解: D

解説: (PassTest メンバーにのみ表示されます)

CheckPoint Check Point Certified Security Expert R81 - 156-315.81 模擬練習