156-215.76試験無料問題集（358題）「CheckPoint Check Point Certified Security Administrator

出題：1

Which command would provide the most comprehensive diagnostic information to Check Point Technical Support?

A. fw cpinfo

B. cpstat - date.cpstat.txt

C. cpinfo -o date.cpinfo.txt

D. diag

正解：C 解答を投票する

出題：2

Sally has a Hot Fix Accumulator (HFA) she wants to install on her Security Gateway which operates with GAiA, but she cannot SCP the HFA to the system. She can SSH into the Security Gateway, but she has never been able to SCP files to it. What would be the most likely reason she cannot do so?

A. She needs to edit /etc/scpusers and add the Standard Mode account.

B. She needs to edit /etc/SSHd/SSHd_config and add the Standard Mode account.

C. She needs to run sysconfig and restart the SSH process.

D. She needs to run cpconfig to enable the ability to SCP files.

正解：A 解答を投票する

出題：3

What mechanism does a gateway configured with Identity Awareness and LDAP initially use to communicate with a Windows 2003 or 2008 server?

A. RCP

B. LDAP

C. WMI

D. CIFS

正解：C 解答を投票する

出題：4

How are cached usernames and passwords cleared from the memory of a R76 Security Gateway?

A. By retrieving LDAP user information using the command fw fetchldap.

B. By using the Clear User Cache button in SmartDashboard.

C. Usernames and passwords only clear from memory after they time out.

D. By installing a Security Policy.

正解：D 解答を投票する

出題：5

Peter is your new Security Administrator. On his first working day, he is very nervous and enters the wrong password three times. His account is locked. What can be done to unlock Peter's account? Give the BEST answer.

A. It is not possible to unlock Peter's account. You have to install the firewall once again or abstain from Peter's help.

B. You can unlock Peter's account by using the command fwm unlock_admin -u Peter on the Security Gateway.

C. You can unlock Peter's account by using the command fwm lock_admin -u Peter on the Security Management Server.

D. You can unlock Peter's account by using the command fwm unlock_admin -u Peter on the Security Management Server

正解：C 解答を投票する

出題：6

Which of the following uses the same key to decrypt as it does to encrypt?

A. Dynamic encryption

B. Certificate-based encryption

C. Asymmetric encryption

D. Symmetric encryption

正解：D 解答を投票する

出題：7

You find a suspicious connection from a problematic host. You decide that you want to block everything from that whole network, not just the problematic host. You want to block this for an hour while you investigate further, but you do not want to add any rules to the Rule Base. How do you achieve this?

A. Add a temporary rule using SmartDashboard and select hide rule.

B. Use dbedit to script the addition of a rule directly into the Rule Bases_5_0.fws configuration file.

C. Select Block intruder from the Tools menu in SmartView Tracker.

D. Create a Suspicious Activity Rule in SmartView Monitor.

正解：D 解答を投票する

出題：8

A Web server behind the Security Gateway is set to Automatic Static NAT. Client side NAT is not checked in the Global Properties. A client on the Internet initiates a session to the Web Server. Assuming there is a rule allowing this traffic, what other configuration must be done to allow the traffic to reach the Web server?

A. Nothing else must be configured.

B. A static route for the NAT IP must be added to the Gateway's upstream router.

C. Automatic ARP must be unchecked in the Global Properties.

D. A static route must be added on the Security Gateway to the internal host.

正解：D 解答を投票する

出題：9

What is a Consolidation Policy?

A. The collective name of the logs generated by SmartReporter.

B. The specific Policy written in SmartDashboard to configure which log data is stored in the SmartReporter database.

C. A global Policy used to share a common enforcement policy for multiple Security Gateways.

D. The collective name of the Security Policy, Address Translation, and IPS Policies.

正解：B 解答を投票する

出題：10

The Captive Portal tool:

A. Is deployed from the Identity Awareness page in the Global Properties settings.

B. Is only used for guest user authentication.

C. Allows access to users already identified.

D. Acquires identities from unidentified users.

正解：D 解答を投票する

出題：11

By default, when you click File > Switch Active File in SmartView Tracker, the Security Management Server:

A. Prompts you to enter a filename, and then saves the log file.

B. Purges the current log file, and starts a new log file.

C. Purges the current log file, and prompts you for the new log's mode.

D. Saves the current log file, names the log file by date and time, and starts a new log file.

正解：D 解答を投票する

出題：12

Which authentication type permits five different sign-on methods in the authentication properties window?

A. Client Authentication

B. Manual Authentication

C. Session Authentication

D. User Authentication

正解：A 解答を投票する

出題：13

You have two rules, ten users, and two user groups in a Security Policy. You create
database version 1 for this configuration. You then delete two existing users and add a new user group. You modify one rule and add two new rules to the Rule Base. You save the Security Policy and create database version 2. After awhile, you decide to roll back to version 1 to use the Rule Base, but you want to keep your user database. How can you do this?

A. Restore the entire database, except the user database, and then create the new user and user group.

B. Run fwm dbexport -l filename. Restore the database. Then, run fwm dbimport -l filename to import the users.

C. Run fwm_dbexport to export the user database. Select restore the entire database in the Database Revision screen. Then, run fwm_dbimport.

D. Restore the entire database, except the user database.

正解：D 解答を投票する

出題：14

You manage a global network extending from your base in Chicago to Tokyo, Calcutta and Dallas. Management wants a report detailing the current software level of each Enterprise class Security Gateway. You plan to take the opportunity to create a proposal outline, listing the most cost-effective way to upgrade your Gateways. Which two SmartConsole applications will you use to create this report and outline?

A. SmartView Monitor and SmartUpdate

B. SmartLSM and SmartUpdate

C. SmartView Tracker and SmartView Monitor

D. SmartDashboard and SmartView Tracker

正解：D 解答を投票する

156-215.76試験無料問題集「CheckPoint Check Point Certified Security Administrator - GAiA 認定」