156-315.81試験無料問題集（616題）「CheckPoint Check Point Certified Security Expert R81 認定」

出題：1

Which command shows the current Security Gateway Firewall chain?

A. fw ctl chain

B. show firewall chain

C. show current chain

D. fw ctl firewall-chain

正解：A 解答を投票する

出題：2

Which of the following is NOT an internal/native Check Point command?

A. fwaccel on

B. cphaprob

C. fw ct1 debug

D. tcpdump

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

Which of the SecureXL templates are enabled by default on Security Gateway?

A. None

B. Drop

C. Accept

D. NAT

正解：A 解答を投票する

出題：4

Check Pont Central Deployment Tool (CDT) communicates with the Security Gateway / Cluster Members over Check Point SIC _______ .

A. TCP Port 19009

B. TCP Port 18191

C. TCP Port 18209

D. TCP Port 18190

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

Which is NOT a SmartEvent component?

A. SmartEvent Server

B. Correlation Unit

C. Log Server

D. Log Consolidator

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

Which of the following is a task of the CPD process?

A. Transfers messages between Firewall processes

B. Log forwarding

C. Invoke and monitor critical processes and attempts to restart them if they fail

D. Responsible for processing most traffic on a security gateway

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

In the Check Point Firewall Kernel Module, each Kernel is associated with a key, which specifies the type of traffic applicable to the chain module. For Wire Mode configuration, chain modules marked with
____________ will not apply.

A. 2

B. ffff

C. 1

D. 3

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：8

You need to change the MAC-address on eth2 interface of the gateway. What is the correct way to change MAC-address in Check Point Gaia?

A. In expert-mode run ifconfig eth1 hw 11:11:11:11 11 11

B. In CLISH run: set interface eth2 mac-addr 11:11:11:11:11:11

C. In expert-mode run: ethtool -4 eth2 mac 11 11:11:11:11:11

D. In CLISH run set interface eth2 hw-addr 11 11 11:11:11 11

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：9

You can access the ThreatCloud Repository from:

A. R81.20 SmartConsole and Application Wiki

B. Threat Wiki and Check Point Website

C. Threat Prevention and Threat Tools

D. R81.20 SmartConsole and Threat Prevention

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：10

What order should be used when upgrading a Management High Availability Cluster?

A. Standby Management, then Active Management

B. Primary Management, then Secondary Management

C. Secondary Management, then Primary Management

D. Active Management, then Standby Management

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：11

The log server sends what to the Correlation Unit?

A. Logs

B. CPMI dbsync

C. Authentication requests

D. Event Policy

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：12

Which command collects diagnostic data for analyzing a customer setup remotely?

A. cpinfo

B. sysinfo

C. migrate export

D. cpv

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：13

If a "ping"-packet is dropped by FW1 Policy -on how many inspection Points do you see this packet in "fw monitor"?

A. I don't see it in fw monitor

B. "i", "l" and "o"

C. "i" and "l"

D. "i" only

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：14

How can you switch the active log file?

A. Run fwm logswitch on the gateway

B. Run fw logswitch on the gateway

C. Run fwm logswitch on the Management Server

D. Run fw logswitch on the Management Server

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：15

Sticky Decision Function (SDF) is required to prevent which of the following? Assume you set up an Active-Active cluster.

A. Symmetric routing

B. Asymmetric routing

C. Failovers

D. Anti-Spoofing

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：16

You notice that your firewall is under a DDoS attack and would like to enable the Penalty Box feature, which command you use?

A. sim erdos -v 1

B. sim erdos -e 1

C. sim erdos - m 1

D. sim erdos -x 1

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：17

SmartEvent does NOT use which of the following procedures to identify events:

A. Matching a log against each event definition

B. Matching a log against local exclusions

C. Create an event candidate

D. Matching a log against global exclusions

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：18

If an administrator wants to add manual NAT for addresses now owned by the Check Point firewall, what else is necessary to be completed for it to function properly?

A. Add the proxy ARP configurations in a file called $CPDIR/conf/local.arp

B. Add the proxy ARP configurations in a file called $FWDIR/conf/local.arp

C. Nothing - the proxy ARP is automatically handled in the R81 version

D. Add the proxy ARP configurations in a file called /etc/conf/local.arp

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：19

The system administrator of a company is trying to find out why acceleration is not working for the traffic.
The traffic is allowed according to the rule base and checked for viruses. But it is not accelerated.
What is the most likely reason that the traffic is not accelerated?

A. The traffic is originating from the gateway itself.

B. Acceleration is not enabled.

C. There is a virus found. Traffic is still allowed but not accelerated.

D. The connection required a Security server.

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

156-315.81試験無料問題集「CheckPoint Check Point Certified Security Expert R81 認定」