156-315.81試験無料問題集（628題）「CheckPoint Check Point Certified Security Expert R81 認定」

出題：1

Vanessa is expecting a very important Security Report. The Document should be sent as an attachment via e-mail. An e-mail with Security_report.pdf file was delivered to her e-mail inbox. When she opened the PDF file, she noticed that the file is basically empty and only few lines of text are in it. The report is missing some graphs, tables and links.
Which component of SandBlast protection is her company using on a Gateway?

A. SandBlast Threat Emulation

B. SandBlast Agent

C. Check Point Protect

D. SandBlast Threat Extraction

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

What is required for a site-to-site VPN tunnel that does not use certificates?

A. RSA Token

B. SecurelD

C. Pre-Shared Secret

D. Unique Passwords

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

How often does Threat Emulation download packages by default?

A. Twice per day

B. Once a week

C. Once an hour

D. Once per day

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

What is not a purpose of the deployment of Check Point API?

A. Integrate Check Point products with 3rd party solution

B. Create a customized GUI Client for manipulating the objects database

C. Create products that use and enhance the Check Point solution

D. Execute an automated script to perform common tasks

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

Which of the following blades is NOT subscription-based and therefore does not have to be renewed on a regular basis?

A. Advanced Networking Blade

B. Threat Emulation

C. Anti-Virus

D. Application Control

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

Why is a Central License the preferred and recommended method of licensing?

A. Central Licensing ties to the IP address of the management server and is not dependent on the IP of any gateway in the event it changes.

B. Central Licensing ties to the IP address of a gateway and can be changed to any gateway if needed.

C. Central Licensing actually not supported with Gaia.

D. Central Licensing is the only option when deploying Gala.

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

What must you do first if "fwm sic_reset" could not be completed?

A. Reset SIC from Smart Dashboard

B. Cpstop then find keyword "certificate" in objects_5_0.C and delete the section

C. Reinitialize SIC on the security gateway then run "fw unloadlocal"

D. Change internal CA via cpconfig

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：8

Alice & Bob are going to deploy Management Data Plane Separation (MDPS) for all their Check Point Security Gateway(s)/Cluster(s). Which of the following statement is true?

A. Management Plane - To access, provision and monitor the Security Gateway

B. Data Plane - To access, provision and monitor the Security Gateway

C. Management Plane - for all other network traffic and processing

D. Each network environment is dependent and includes interfaces, routes, sockets, and processes

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：9

Fill in the blanks: A _______ license requires an administrator to designate a gateway for attachment whereas a ________ license is automatically attached to a Security Gateway.

A. Local; central

B. Central; local

C. Formal; corporate

D. Local; formal

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：10

What API command below creates a new host with the name "New Host" and IP address of "192.168.0.10"?

A. set host name "New Host" ip-address "192.168.0.10"

B. new host name "New Host" ip-address "192.168.0.10"

C. add host name "New Host" ip-address "192.168.0.10"

D. create host name "New Host" ip-address "192.168.0.10"

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：11

Mobile Access Gateway can be configured as a reverse proxy for Internal Web Applications Reverse proxy users browse to a URL that is resolved to the Security Gateway IP address. Which of the following Check Point command is true for enabling the Reverse Proxy:

A. ProxyReverseCLI

B. ReverseProxy

C. ReverseCLIProxy

D. ReverseProxyCLI

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：12

True or False: In a Distributed Environment, a Central License can be installed via CLI on a Security Gateway.

A. True, Central License can be installed with CPLIC command on a Security Gateway

B. True, CLI is the prefer method for Licensing

C. False, Central Licenses are installed via Gaia on Security Gateways

D. False, Central License are handled via Security Management Server

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：13

Name the file that is an electronically signed file used by Check Point to translate the features in the license into a code?

A. license File (.lic)

B. Contract file (.xml)

C. cp.macro

D. Both License (.lic) and Contract (.xml) files

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：14

You have a Geo-Protection policy blocking Australia and a number of other countries. Your network now requires a Check Point Firewall to be installed in Sydney, Australia.
What must you do to get SIC to work?

A. Nothing - Check Point control connections function regardless of Geo-Protection policy

B. Create a rule at the top in your Check Point firewall to bypass the Geo-Protection

C. Create a rule at the top in the Sydney firewall to allow control traffic from your network

D. Remove Geo-Protection, as the IP-to-country database is updated externally, and you have no control of this.

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：15

How to can you make sure that the old logs will be available after updating the Management to version R81.20 using the Advanced Upgrade Method?

A. Use the WebUI to save a snapshot before updating the Management -> Maintenance > Snapshot Management

B. Use the migrate_server tool with the option '-I' for the logs and '-x' for the index

C. The logs will be included running SFWDIR/scripts/migrate_server export -v R81.20 <path/filename>

D. Use the WebUI -> Maintenance > System Backup and store the backup on a remote FTP server

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：16

Which of the following technologies extracts detailed information from packets and stores that information in state tables?

A. Application Layer Firewall

B. INSPECT Engine

C. Stateful Inspection

D. Packet Filtering

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：17

Which statement is correct about the Sticky Decision Function?

A. It is not supported with either the Performance pack of a hardware based accelerator card

B. It is automatically disabled if the Mobile Access Software Blade is enabled on the cluster

C. Does not support SPI's when configured for Load Sharing

D. It is not required L2TP traffic

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：18

Fill in the blank: Authentication rules are defined for ________ .

A. Users using UserCheck

B. All users in the database

C. Individual users

D. User groups

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：19

An administrator wishes to enable Identity Awareness on the Check Point firewalls. However, they allow users to use company issued or personal laptops. Since the administrator cannot manage the personal laptops, which of the following methods would BEST suit this company?

A. Terminal Servers Agent

B. Browser-Based Authentication

C. AD Query

D. Identity Agents

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

156-315.81試験無料問題集「CheckPoint Check Point Certified Security Expert R81 認定」