156-215.77試験無料問題集（390題）「CheckPoint Check Point Certified Security Administrator 認定」

出題：1

NAT can NOT be configured on which of the following objects?

A. Host

B. Address Range

C. HTTP Logical Server

D. Gateway

正解：C 解答を投票する

出題：2

Which type of R77 Security Server does not provide User Authentication?

A. FTP Security Server

B. SMTP Security Server

C. HTTP Security Server

D. HTTPS Security Server

正解：B 解答を投票する

出題：3

You are installing a Security Management Server. Your security plan calls for three administrators for this particular server. How many can you create during installation?

A. One

B. As many as you want

C. Only one with full access and one with read-only access

D. Depends on the license installed on the Security Management Server

正解：A 解答を投票する

出題：4

Which of the following R77 SmartView Tracker views will display a popup warning about performance implications on the Security Gateway?

A. Account Query

B. All Records Query

C. Audit Tab

D. Active Tab

正解：D 解答を投票する

出題：5

The Security Gateway is installed on GAiA R77 The default port for the Web User Interface is _______.

A. TCP 4433

B. TCP 257

C. TCP 18211

D. TCP 443

正解：D 解答を投票する

出題：6

Which NAT option is available for Manual NAT as well as Automatic NAT?

A. Enable IP Pool NAT

B. Translate destination on client-side

C. Automatic ARP configuration

D. Allow bi-directional NAT

正解：B 解答を投票する

出題：7

Why should the upgrade_export configuration file (.tgz) be deleted after you complete the import process?

A. It contains your security configuration, which could be exploited.

B. It will conflict with any future upgrades when using SmartUpdate.

C. SmartUpdate will start a new installation process if the machine is rebooted.

D. It will prevent a future successful upgrade_export since the .tgz file cannot be overwritten.

正解：A 解答を投票する

出題：8

Where do we need to reset the SIC on a gateway object?

A. SmartDashboard > Edit Security Management Server Object > SIC

B. SmartUpdate > Edit Security Management Server Object > SIC

C. SmartUpdate > Edit Gateway Object > Communication

D. SmartDashboard > Edit Gateway Object > General Properties > Communication

正解：A 解答を投票する

出題：9

Which SmartView Tracker selection would most effectively show who installed a Security Policy blocking all traffic from the corporate network?

A. Custom filter

B. Network and Endpoint tab

C. Active tab

D. Management tab

正解：D 解答を投票する

出題：10

Which of the following is a viable consideration when determining Rule Base order?

A. Grouping functionally related rules together

B. Grouping authentication rules with address-translation rules

C. Grouping reject and drop rules after the Cleanup Rule

D. Grouping rules by date of creation

正解：A 解答を投票する

出題：11

Choose the SmartLog property that is TRUE.

A. SmartLog and SmartView Tracker are mutually exclusive.

B. SmartLog is a client of SmartConsole that enables enterprises to centrally track log records and security activity with Google-like search.

C. SmartLog is not a Check Point product.

D. SmartLog has been an option since release R71.10.

正解：B 解答を投票する

出題：12

Which rule position in the Rule Base should hold the Cleanup Rule? Why?

A. Last. It serves a logging function before the implicit drop.

B. First. It explicitly accepts otherwise dropped traffic.

C. Last. It explicitly drops otherwise accepted traffic.

D. Before last followed by the Stealth Rule.

正解：A 解答を投票する

出題：13

In the Rule Base displayed, user authentication in Rule 4 is configured as fully automatic.
Eric is a member of the LDAP group, MSD_Group.

What happens when Eric tries to connect to a server on the Internet?

A. None of these things will happen.

B. Eric will be authenticated and get access to the requested server.

C. Eric will be blocked because LDAP is not allowed in the Rule Base.

D. Eric will be dropped by the Stealth Rule.

正解：B 解答を投票する

出題：14

Which of the following items should be configured for the Security Management Server to authenticate via LDAP?

A. Check Point Password

B. Windows logon password

C. WMI object

D. Active Directory Server object

正解：D 解答を投票する

出題：15

VPN gateways must authenticate to each other prior to exchanging information.
What are the two types of credentials used for authentication?

A. Certificates and IPsec

B. Certificates and pre-shared secret

C. IPsec and VPN Domains

D. 3DES and MD5

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

156-215.77試験無料問題集「CheckPoint Check Point Certified Security Administrator 認定」