156-215.76試験無料問題集（358題）「CheckPoint Check Point Certified Security Administrator

出題：1

Which of the below is the MOST correct process to reset SIC from SmartDashboard?

A. Run cpconfig, and click Reset.

B. Click the Communication button for the firewall object, then click Reset. Run cpconfig and type a new activation key.

C. Run cpconfig, and select Secure Internal Communication > Change One Time Password.

D. Click Communication > Reset on the Gateway object, and type a new activation key.

正解：B 解答を投票する

出題：2

The ____________ and ____________ rules are the two basic rules which should be used by all Security Administrators.

A. Network Traffic; Stealth

B. Cleanup; Stealth

C. Cleanup; Administrator Access

D. Administrator Access; Stealth

正解：B 解答を投票する

出題：3

How can you reset the Security Administrator password that was created during initial Security Management Server installation on SecurePlatform?

A. As expert user Type fwm -a, and provide the existing administrator's account name. Reset the Security Administrator's password.

B. Export the user database into an ASCII file with fwm dbexport. Open this file with an editor, and delete the Password portion of the file. Then log in to the account without a password. You will be prompted to assign a new password.

C. Launch SmartDashboard in the User Management screen, and edit the cpconfig administrator.

D. Type cpm -a, and provide the existing administrator's account name. Reset the Security Administrator's password.

正解：A 解答を投票する

出題：4

What information is found in the SmartView Tracker Management log?

A. Destination IP address

B. Historical reports log

C. Most accessed Rule Base rule

D. Policy rule modification date/time stamp

正解：D 解答を投票する

出題：5

Your company is running Security Management Server R76 on GAiA, which has been migrated through each version starting from Check Point 4.1. How do you add a new administrator account?

A. Using cpconfig on the Security Management Server, choose Administrators

B. Using SmartDashboard or cpconfig

C. Using SmartDashboard, under Users, select Add New Administrator

D. Using the Web console on SecurePlatform under Product configuration, select Administrators

正解：C 解答を投票する

出題：6

What is a Consolidation Policy?

A. The collective name of the logs generated by SmartReporter.

B. The specific Policy written in SmartDashboard to configure which log data is stored in the SmartReporter database.

C. A global Policy used to share a common enforcement policy for multiple Security Gateways.

D. The collective name of the Security Policy, Address Translation, and IPS Policies.

正解：B 解答を投票する

出題：7

Where is the fingerprint generated, based on the output display?

A. SmartConsole

B. SmartUpdate

C. Security Management Server

D. SmartDashboard

正解：C 解答を投票する

出題：8

Which command enables IP forwarding on IPSO?

A. echo 1 > /proc/sys/net/ipv4/ip_forward

B. ipsofwd on admin

C. echo 0 > /proc/sys/net/ipv4/ip_forward

D. clish -c set routing active enable

正解：B 解答を投票する

出題：9

You find a suspicious FTP site trying to connect to one of your internal hosts. How do you block it in real time and verify it is successfully blocked? Highlight the suspicious connection in SmartView Tracker:

A. Active mode. Block it using Tools > Block Intruder menu. Observe in the Active mode that the suspicious connection is listed in this SmartView Tracker view as "dropped".

B. Log mode. Block it using Tools > Block Intruder menu. Observe in the Log mode that the suspicious connection is listed in this SmartView Tracker view as "dropped".

C. Log mode. Block it using Tools > Block Intruder menu. Observe in the Log mode that the suspicious connection does not appear again in this SmartView Tracker view.

D. Active mode. Block it using Tools > Block Intruder menu. Observe in the Active mode that the suspicious connection does not appear again in this SmartView Tracker view.

正解：D 解答を投票する

出題：10

Many companies have defined more than one administrator. To increase security, only one administrator should be able to install a Rule Base on a specific Firewall. How do you configure this?

A. Put the one administrator in an Administrator group and configure this group in the specific Firewall object in Advanced > Permission to Install.

B. Right-click on the object representing the specific administrator, and select that Firewall in Policy Targets.

C. Define a permission profile in SmartDashboard with read/write privileges, but restrict it to all other firewalls by placing them in the Policy Targets field. Then, an administrator with this permission profile cannot install a policy on any Firewall not listed here.

D. In the object General Properties representing the specific Firewall, go to the Software Blades product list and select Firewall. Right-click in the menu, select Administrator to Install to define only this administrator.

正解：A 解答を投票する

出題：11

Which of these attributes would be critical for a site-to-site VPN?

A. Centralized management

B. Strong authentication

C. Scalability to accommodate user groups

D. Strong data encryption

正解：D 解答を投票する

出題：12

Several Security Policies can be used for different installation targets. The Firewall protecting Human Resources' servers should have its own Policy Package. These rules must be installed on this machine and not on the Internet Firewall. How can this be accomplished?

A. When selecting the correct Firewall in each line of the Rule Base row Install On, only this Firewall is shown in the list of possible installation targets after selecting Policy > Install on Target.

B. In the menu of SmartDashboard, go to Policy > Policy Installation Targets and select the correct firewall via Specific Targets.

C. A Rule Base is always installed on all possible targets. The rules to be installed on a Firewall are defined by the selection in the Rule Base row Install On.

D. A Rule Base can always be installed on any Check Point Firewall object. It is necessary to select the appropriate target directly after selecting Policy > Install on Target.

正解：B 解答を投票する

出題：13

What happens when you open the Gateway object window Trusted Communication and press and confirm Reset?

A. The Gateway certificate will be revoked on the Gateway only.

B. Sic will be reset on the Gateway only.

C. The Gateway certificate will be revoked on the Security Management Server and SIC will be reset on the Gateway.

D. The Gateway certificate will be revoked on the Security Managment Server only.

正解：D 解答を投票する

156-215.76試験無料問題集「CheckPoint Check Point Certified Security Administrator - GAiA 認定」