156-915.77問題集、CheckPoint実際の試験問題

質問 1

When configuring an LDAP Group object, select option _______________ if you want the gateway to reference a specific group defined on the LDAP server for authentication purposes.

A. Only Group in Branch

B. Group Agnostic

C. Only Sub Tree

D. All Account-Unit's Users

正解: C

質問 2

If Bob wanted to create a Management High Availability configuration, what is the minimum number of Security Management servers required in order to achieve his goal?

A. One

B. Two

C. Three

D. Four

正解: A

質問 3

What is the most common cause for a Quick mode packet 1 failing with the error "No Proposal Chosen" error?

A. The encryption strength and hash settings of one peer does not match the other.

B. There is a network connectivity issue.

C. The previously established Permanent Tunnel has failed.

D. The OS and patch level of one gateway does not match the other.

正解: A

質問 4

What could the following regular expression be used for in a DLP rule?
\$([0-9]*,[0-9] [0-9] [0-9]. [0-9] [0-9]
Select the best answer

A. As a compound data type representation.

B. As a Data Type to prevent employees from sending an email that contains a complete price-list of nine products.

C. As a Data Type to prevent programmers from leaking code outside the company

D. As a Data Type to prevent the Finance Department from leaking salary information to employees

正解: D

質問 5

Where does the security administrator activate Identity Awareness within SmartDashboard?

A. LDAP Server Object > General Properties

B. Gateway Object > General Properties

C. Security Management Server > Identity Awareness

D. Policy > Global Properties > Identity Awareness

正解: B

質問 6

What step should you take before runningupgrade export?

A. Disconnect all GUI clients.

B. Run a cpstop on the Security Gateway.

C. Run a cpstop on the Security Management Server.

D. Install policy and exit SmartDashboard.

正解: A

質問 7

What is the behavior ofCluster XLin a High Availability environment?

A. The active member responds to the virtual IP address.nd both members pass traffic when using their physical addresses.

B. Both members respond to the virtual IP address, but only the active member is able to pass traffic.

C. The active member responds to the virtual IP address.nd is the only member that passes traffic

D. The passive member responds to the virtual IP address, and both members route traffic when using their physical addresses.

E. Both members respond to the virtual IP address, and both members pass traffic when using their physical addresses.

正解: C

質問 8

You plan to migrate a VPN-1 NG with Application Intelligence (Al) R55 Smart Center Server to VPN-1 NGX. You also plan to upgrade four VPN-1 Pro Gateways at remote offices, and one local VPN-1 Pro Gateway at your company's headquarters. The Smart Center Server configuration must be migrated. What is the correct procedure to migrate the configuration?

A. 1. Copy the $FWDIR\conf directory from theSmart CenterServer.
2.Save directory contents to another directory.
3.Uninstall theSmart CenterServer, and install a new Smart Center Server.
4.Move directory contents to $FWDIR\conf.
5.Reinstall all gateways using NGX and install a policy.

B. 1. Upgrade the Smart Center Server, using the VPN-1 NGX CD. 2. Reinstall and update the licenses of the five remote Gateways.

C. Upgrade the Smart Center Server and the five remote Gateways via Smart Update, at the same time.

D. 1. Upgrade the five remote Gateways via Smart Update.
2. Upgrade the Smart Center Server, using the VPN-1 NGX CD.

E. 1. From the VPN-1 NGX CD in the Smart Center Server, select "advance upgrade".
2.After importing the Smart Center configuration into the new NGX Smart Center, reboot.
3.Upgrade all licenses and software on all five remote Gateways via Smart Update.

正解: E

質問 9

An Account Unit is the interface between the __________ and the __________.

A. Gateway, Resources

B. Clients, Server

C. System, Database

D. Users, Domain

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 10

There are times when you want to use Link Selection to manage high-traffic VPN connections. With Link Selection you can:

A. Assign links to specific VPN communities.

B. Use links based on Day/Time.

C. Probe links for availability.

D. Use links based on authentication method.

正解: C

質問 11

What is a "sticky" connection?

A. A Sticky Connection is a connection that always chooses the same gateway to set up the initial connection.

B. A Sticky Connection is a connection that remains the same.

C. A Sticky Connection is one in which a reply packet returns through the same gateway as the original packet.

D. A Sticky Connection is a VPN connection that remains up until you manually bring it down.

正解: C

質問 12

John is configuring a new R76 Gateway cluster but he can not configure the cluster as Third Party IP Clustering because this option is not available in Gateway Cluster Properties.

What's happening?

A. Cluster XLneeds to be unselected to permit 3rd party clustering configuration.

B. John has an invalidCluster XLlicense.

C. John is not using third party hardware as IP Clustering is part of Check Point's IP Appliance.

D. Third Party Clustering is not available for R76 Security Gateways.

正解: A

質問 13

The set of rules that governs the types of objects in the directory and their associated attributes is called the:

A. LDAP Policy

B. Schema

C. Smart Database

D. Access Control List

正解: B

質問 14

Consider the following actions that VPN-1 NGX can take when it control packets. The Policy Package has been configured for Traditional Mode VPN. Identify the options that includes the available actions. Select four.

A. Hold

B. Client auth

C. Reject

D. Allow

E. Drop

F. Encrypt

G. Decrypt

H. Proxy

I. Accept

正解: C,E,F,I

CheckPoint Check Point Certified Security Expert Update Blade - 156-915.77 模擬練習