156-215.71試験無料問題集（465題）「CheckPoint Check Point Certified Security Administrator R71 認定」

出題：1

What are the results of the command: fw sam [Target IP Address]?

A. Connections to the specified target are blocked without the need to change the Security Policy.

B. Connections from the specified target are blocked without the need to change the Security Policy.

C. Connections to and from the specified target are blocked without the need to change the Security Policy.

D. Connections to and from the specified target are blocked with the need to change the Security Policy.

正解：C 解答を投票する

出題：2

What information is found in the SmartView Tracker Management log?

A. Top used QOS rule

B. Rule author

C. TCP handshake average duration

D. TCP source port

正解：B 解答を投票する

出題：3

Which feature in R71 permits blocking specific IP addresses for a specified time period?

A. Suspicious Activity Monitoring

B. Block Port Overflow

C. HTTP Methods

D. Local Interface Spoofing

正解：A 解答を投票する

出題：4

Which of the following is NOT supported with office mode?

A. SSL Network Extender

B. L2TP

C. Transparent mode

D. Secure Client

正解：C 解答を投票する

出題：5

Which of the following statements accurately describes the upgrade_export command?

A. Upgrade_export is used when upgrading the Security Gateway, and allows certain files to be included before exporting.

B. Used primarily when upgrading the Security Management Server, upgrade_export stores all object databases and the conf directories for importing to a newer version of the Security Gateway.

C. Used when upgrading the Security Gateway, upgrade_export includes modified files directory.

D. Upgrade_export stores network-configuration data, objects, global properties, and the data base revisions prior to upgrading the security Management Server.

正解：B 解答を投票する

出題：6

In order to have full control, you decide to use Manual NAT entries instead of Automatic NAT rules. Which is of the following is NOT true?

A. When using Static NAT, you must add proxy ARP entries to the Gateway for all hiding addresses.

B. When using Static NAT, you must enter ARP entries for the Gateway on all hosts that are using the NAT Gateway with that Gateway's internal interface IP address.

C. When using Dynamic Hide NAT with an address that is not configured on a Gateway interface, you need to add a proxy ARP entry for that address.

D. If you chose Automatic NAT instead, all necessary entries are done for you.

正解：B 解答を投票する

出題：7

Your R71 enterprise Security Management Server is running abnormally on Windows 2003 Server. You decide to try reinstalling the Security Management Server, but you want to try keeping the critical Security Management Server configuration settings intact (i.e., all Security Policies, databases, SIC, licensing etc.) What is the BEST method to reinstall the Server and keep its critical configuration?

A. 1) Download the latest upgrade_export utility and run it from a \ temp directory to export the
Configuration.
2) Perform any requested upgrade verification suggested steps.
3) Uninstall all R71 packages via Add/Remove Programs and reboot
4) Use smartUpdate to reinstall the Security Management server and reboot
5) Transfer the .tgz file back to the local \ temp.
6) Run upgrade_import to import the configuration.

B. 1) Download the latest upgrade_export utility and run it from a \ temp directory to export the
Configuration.
2) Transferee .tgz file to another network machine
3) Uninstall all R71 packages via Add/Remove Programs and reboot
4) Install again using the R71 CD ROM as a primary security management server
5) Reboot and than transfer the .tgz file back to the local\ tem p
6) Run upgcade_import to import the configuration.

C. 1) Run the latest upgrade_export utility to export the configuration
2) Leave the exported - tgz file in %FWDIR\bin.
3) Install the primary security Management Server on top of the current installation
4) Run upgrade_import to Import the configuration.

D. 1) Insert the R71 CD-ROM. and select the option to export the configuration into a . tgz file
2) Skip any upgrade verification warnings since you are not upgrading.
3) Transfer the. tgz file to another networked machine.
4) Download and run the cpclean utility and reboot.
5) Use the R71 CD_ROM to select the upgrade__import option to import the c

正解：A 解答を投票する

出題：8

When launching SmartDashboard, what information is required to log into R71?

A. User Name, Management Server IP, certificate fingerprint file

B. User Name, Password. Management Server IP

C. Password. Management Server IP

D. Password, Management Server IP, LDAP Server IP

正解：D 解答を投票する

出題：9

The customer has a small Check Point installation which includes one Windows 2003 server as SmartConsole and Security Management Server with a second server running SecurePlatform as Security Gateway. This is an example of a(n):

A. Unsupported configuration.

B. Stand-Alone Installation.

C. Distributed Installation.

D. Hybrid Installation.

正解：C 解答を投票する

出題：10

What CANNOT be configured for existing connections during a policy install?

A. Reset all connections

B. Keep all connections

C. Re-match connections

D. Keep data connections

正解：A 解答を投票する

156-215.71試験無料問題集「CheckPoint Check Point Certified Security Administrator R71 認定」