156-315.77試験無料問題集（755題）「CheckPoint Check Point Certified Security Expert 認定」

出題：1

Included in the client's network are some switches, which rely on IGMP snooping. You must find a solution to work with these switches. Which of the following answers does NOT lead to a successful solution?

A. ClusterXL supports IGMP snooping by default. There is no need to configure anything.

B. Set the value of fwha_enable_igmp_snooping module configuration parameter to 1.

C. Configure static CAMs to allow multicast traffic on specific ports.

D. Disable IGMP registration in switches that rely on IGMP packets

正解：A 解答を投票する

出題：2

Included in the customer's network are some firewall systems with the Performance Pack in use. The customer wishes to use these firewall systems in a cluster (Load Sharing mode). He is not sure if he can use the Sticky Decision Function in this cluster. Explain the situation to him.

A. Sticky Decision Function is not supported when employing either Performance Pack or a hardware-based accelerator card. Enabling the Sticky Decision Function disables these acceleration products.

B. ClusterXL always supports the Sticky Decision Function in the Load Sharing mode.

C. The customer can use the firewalls with Performance Pack inside the cluster, which should support the Sticky Decision Function. It is just necessary to enable the Sticky Decision Function in the SmartDashboard cluster object in the ClusterXL page, Advanced Load Sharing Configuration window.

D. The customer can use the firewalls with Performance Pack inside the cluster, which should support the Sticky Decision Function. It is just necessary to configure it with the clusterXL_SDF_enable command.

正解：A 解答を投票する

出題：3

Network applications accessed using SSL Network Extender have been found to fail after one of their TCP connections has been left idle for more than one hour.
You determine that you must enable sending reset (RST) packets upon TCP time-out expiration.
Where is it necessary to change the setting?

A. $WEBISDIR/conf/cpadmin.elg

B. $FWDIR/conf/objects_5_0.C

C. $CVPNDIR/conf/cvpnd.C

D. $FWDIR/conf/objects.C

正解：B 解答を投票する

出題：4

There are several SmartDirectory (LDAP) features that can be applied to further enhance SmartDirectory (LDAP) functionality, which of the following is NOT one of those features?

A. Encrypted or non-encrypted SmartDirectory (LDAP) Connections usage

B. Support multiple SmartDirectory (LDAP) servers on which many user databases are distributed

C. High Availability, where user information can be duplicated across several servers

D. Support many Domains under the same account unit

正解：D 解答を投票する

出題：5

The _____ Check Point ClusterXL mode must synchronize the virtual IP and MAC addresses on all clustered interfaces.

A. Mode Unicast Load Sharing

B. HA Mode New

C. Mode Multicast Load Sharing

D. HA Mode Legacy

正解：B 解答を投票する

出題：6

Which task will ThreatSpect Engine NOT do?

A. Review the IPS signatures

B. Review the networks signatures for Bot families

C. Look for suspicious activity by monitoring outgoing mail traffic

D. Perform a reputation check

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

In cryptography, the Rivest, Shamir, Adelman (RSA) scheme has which of the following?
Select all that apply.

A. A secret-key encryption-algorithm system

B. A public-key encryption-algorithm system

C. An asymmetric-cipher system

D. A symmetric-cipher system

正解：B,C 解答を投票する

出題：8

The following configuration is for VPN-1 NGX:1s this configuration correct for Management High Availability (HA)?

A. No, the SmartCenter Servers must reside on the same network.

B. No, A VPN-1 NGX SmartCenter Server can only be in a Management HA configuration, if the operating system is Solaris.

C. No, the SmartCenter Servers must be installed on the same operating system.

D. No, a VPN-1 NGX SmartCenter Server cannot run on Red Hat Linux 7.3.

E. No, the SmartCenter Servers do not have the same number of NICs.

正解：C 解答を投票する

出題：9

What are you required to do before running upgrade_export?

A. Run a cpstop on the Security Management Server.

B. Close all GUI clients.

C. Run cpconfig and set yourself up as a GUI client.

D. Run a cpstop on the Security Gateway.

正解：B 解答を投票する

出題：10

What tools CANNOT be launched from SmartUpdate NGX R65?

A. Nokia Voyager

B. cpinfo

C. snapshot

D. SecurePlatform Web UI

正解：C 解答を投票する

出題：11

Which command provides cluster upgrade status?

A. cphaprob tablestat

B. cphaprob status

C. cphaprob fcustat

D. cphaprob ldstat

正解：C 解答を投票する

出題：12

If traffic requires preferential treatment by other routers on the network, in addition to the QoS module, which Check Point QoS feature should be used?

A. Guarantees

B. Low Latency Queuing

C. Weighted Fair Queuing

D. Differentiated Services

正解：D 解答を投票する

156-315.77試験無料問題集「CheckPoint Check Point Certified Security Expert 認定」