CheckPoint 156-315.80リアル試験問題テストエンジン問題集トレーニングには457問あります
156-315.80実際の問題解答PDFには100%カバー率リアル試験問題
質問 90
How many interfaces can you configure to use the Multi-Queue feature?
- A. 3 interfaces
- B. 10 interfaces
- C. 4 interfaces
- D. 5 interfaces
正解: D
解説:
Note -
* Multi-Queue lets you configure a maximum of five interfaces
* You must reboot the gateway after changing the Multi-Queue configuration Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_PerformanceTuning_WebAdmin/93689.htm
質問 91
You have successfully backed up Check Point configurations without the OS information. What command would you use to restore this backup?
- A. cp_merge
- B. migrate import
- C. import backup
- D. restore_backup
正解: A
質問 92
In R80 spoofing is defined as a method of:
- A. Making packets appear as if they come from an authorized IP address.
- B. Hiding your firewall from unauthorized users.
- C. Disguising an illegal IP address behind an authorized IP address through Port Address Translation.
- D. Detecting people using false or wrong authentication logins
正解: A
解説:
Explanation/Reference:
Explanation: IP spoofing replaces the untrusted source IP address with a fake, trusted one, to hijack connections to your network. Attackers use IP spoofing to send malware and bots to your protected network, to execute DoS attacks, or to gain unauthorized access.
Reference:
http://dl3.checkpoint.com/paid/74/74d596decb6071a4ee642fbdaae7238f/
CP_R80_SecurityManagement_AdminGuide.pdf?
HashKey=1479584563_6f823c8ea1514609148aa4fec5425db2&xtn=.pdf
質問 93
For Management High Availability, which of the following is NOT a valid synchronization status?
- A. Down
- B. Never been synchronized
- C. Collision
- D. Lagging
正解: A
解説:
References:
質問 94
In R80 spoofing is defined as a method of:
- A. Making packets appear as if they come from an authorized IP address.
- B. Hiding your firewall from unauthorized users.
- C. Disguising an illegal IP address behind an authorized IP address through Port Address Translation.
- D. Detecting people using false or wrong authentication logins
正解: A
解説:
Explanation: IP spoofing replaces the untrusted source IP address with a fake, trusted one, to hijack connections to your network. Attackers use IP spoofing to send malware and bots to your protected network, to execute DoS attacks, or to gain unauthorized access.
Reference:
http://dl3.checkpoint.com/paid/74/74d596decb6071a4ee642fbdaae7238f/
CP_R80_SecurityManagement_AdminGuide.pdf?
HashKey=1479584563_6f823c8ea1514609148aa4fec5425db2&xtn=.pdf
質問 95
Which is not a blade option when configuring SmartEvent?
- A. SmartEvent Server
- B. Correlation Unit
- C. Log Server
- D. SmartEvent Unit
正解: D
解説:
On the Management tab, enable these Software Blades:
* Logging & Status
* SmartEvent Server
* SmartEvent Correlation Unit
Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_LoggingAndMonitoring/html_frameset.htm?
topic=documents/R80/CP_R80_LoggingAndMonitoring/120829
質問 96
Due to high CPU workload on the Security Gateway, the security administrator decided to purchase a new multicore CPU to replace the existing single core CPU. After installation, is the administrator required to perform any additional tasks?
- A. After upgrading the hardware, increase the number of kernel instances using cpconfig
- B. Run cprestart from clish
- C. Hyperthreading must be enabled in the bios to use CoreXL
- D. Administrator does not need to perform any task. Check Point will make use of the newly installed CPU and Cores
正解: A
解説:
Explanation/Reference:
質問 97
You have existing dbedit scripts from R77. Can you use them with R80.10?
- A. dbedit is not supported in R80.10
- B. dbedit is fully supported in R80.10
- C. dbedit scripts are being replaced by mgmt_cli in R80.10
- D. You can use dbedit to modify threat prevention or access policies, but not create or modify layers
正解: C
質問 98
Fill in the blank: Browser-based Authentication sends users to a web page to acquire identities using ________ .
- A. User Directory
- B. UserCheck
- C. Captive Portal
- D. Captive Portal and Transparent Kerberos Authentication
正解: D
質問 99
What command is used to manually failover a Multi-Version Cluster during the upgrade?
- A. clusterXL_admin down in Expert Mode
- B. set cluster member state down in Clish
- C. clusterXL_admin down in Clish
- D. set cluster down in Expert Mode
正解: C
質問 100
What is the name of the secure application for Mail/Calendar for mobile devices?
- A. Secure Workspace
- B. Capsule Workspace
- C. Capsule VPN
- D. Capsule Mail
正解: B
解説:
Explanation/Reference: https://www.checkpoint.com/products/mobile-secure-workspace/
質問 101
Where do you create and modify the Mobile Access policy in R80?
- A. SmartConsole
- B. SmartDashboard
- C. SmartEndpoint
- D. SmartMonitor
正解: A
質問 102
Fill in the blank: The R80 feature ________ permits blocking specific IP addresses for a specified time period.
- A. Block Port Overflow
- B. Adaptive Threat Prevention
- C. Suspicious Activity Monitoring
- D. Local Interface Spoofing
正解: C
解説:
Explanation
Suspicious Activity Rules Solution
Suspicious Activity Rules is a utility integrated into SmartView Monitor that is used to modify access privileges upon detection of any suspicious network activity (for example, several attempts to gain unauthorized access).
The detection of suspicious activity is based on the creation of Suspicious Activity rules. Suspicious Activity rules are Firewall rules that enable the system administrator to instantly block suspicious connections that are not restricted by the currently enforced security policy. These rules, once set (usually with an expiration date), can be applied immediately without the need to perform an Install Policy operation
質問 103
What is true of the API server on R80.10?
- A. By default, the API server is active on management servers with 4 GB of RAM (or more) and on stand- alone servers with 8GB of RAM (or more).
- B. By default the API server is active on management and stand-alone servers with 16GB of RAM (or more).
- C. By default the API-server is not active and should be activated from the WebUI.
- D. By default the API-server is activated and does not have hardware requirements.
正解: A
解説:
Explanation/Reference: https://sc1.checkpoint.com/documents/R80/APIs/#introduction%20
質問 104
Which blades and or features are not supported in R80?
- A. Identity Awareness
- B. SmartConsole Toolbars
- C. SmartEvent
- D. SmartEvent Maps
正解: D
質問 105
When gathering information about a gateway using CPINFO, what information is included or excluded when using the "-x" parameter?
- A. Does not resolve network addresses
- B. Gets information about the specified Virtual System
- C. Includes the registry
- D. Output excludes connection table
正解: B
解説:
Explanation/Reference: https://www.networksecurityplus.net/2015/02/check-point-how-to-collect-cpinfo-cli.html
質問 106
There are two R77.30 Security Gateways in the Firewall Cluster. They are named FW_A and FW_B. The cluster is configured to work as HA (High availability) with default cluster configuration. FW_A is configured to have higher priority than FW_B. FW_A was active and processing the traffic in the morning. FW_B was standby. Around 1100 am, its interfaces went down and this caused a failover. FW_B became active. After an hour, FW_A's interface issues were resolved and it became operational.
When it re-joins the cluster, will it become active automatically?
- A. Yes, since 'Switch to higher priority cluster member' option is enabled by default on the Global Properties.
- B. Yes, since 'Switch to higher priority cluster member' option on the cluster object properties is enabled by default.
- C. No, since 'maintain' current active cluster member' option on the cluster object properties is enabled by default.
- D. No, since 'maintain' current active cluster member' option is enabled by default on the Global Properties.
正解: C
解説:
References:
質問 107
Which of the following is an identity acquisition method that allows a Security Gateway to identify Active Directory users and computers?
- A. Account Unit Query
- B. UserCheck
- C. User Directory Query
- D. Active Directory Query
正解: D
解説:
Explanation/Reference:
Reference : https://sc1.checkpoint.com/documents/R76/CP_R76_IdentityAwareness_AdminGuide/62402.htm
質問 108
......
CheckPoint 156-315.80 認定試験の出題範囲：
| トピック | 出題範囲 |
|---|---|
| トピック 1 |
|
| トピック 2 |
|
| トピック 3 |
|
| トピック 4 |
|
| トピック 5 |
|
| トピック 6 |
|
| トピック 7 |
|
GoShiken 156-315.80試験練習テスト問題：https://www.goshiken.com/CheckPoint/156-315.80-mondaishu.html