156-590 시험 - Check Point실제시험문제와 답 - 89문항

Question No : 1

At what point is the Anti-Bot blade enforced?

A.Pre-infection
B.Post-infection
C.Pre-inspection
D.Post-inspection

정답:

Question No : 2

What is the main purpose of IPS Implied Exceptions?

A.This defines the handling of traffic if no IPS rule applied to the appropriate packets.
B.This defines the handling of traffic if you do not have an IPS Policy as part of an ordered layer.
C.This feature is to prevent IPS Enforcement to interfere with important Security Gateway operations, such as Control Connections.
D.This defines the handling of traffic if you do not have an IPS Policy as part of an Inline layer.

정답:

Question No : 3

SecureXL full acceleration happens on which component?

A.irq
B.snd
C.dynamic dispatcher
D.cpu core

정답:

Question No : 4

Which mode allows you to tune or troubleshoot the Threat Prevention Blade?

A.Observe Mode
B.Detect Mode
C.Display Mode
D.Watch Mode

정답:

Question No : 5

Which feature can improve performance by allowing the gateway to bypass Anti-Virus inspection of specific files?

A.Content Control
B.Exclusions
C.Exceptions
D.Bypass

정답:

Question No : 6

IPS stands for?

A.Invasion Prevention Software
B.Intrusion Prevention System
C.Intrusion Prevention Software
D.Invasion Prevention System

정답:

Question No : 7

What are the three Preconfigured Threat Prevention Profiles?

A.Inbound, Outbound, Etherbound.
B.Perimeter, Datacenter, East-West Communication.
C.North-South, East-West, Lateral Movement.
D.Basic, Optimized, Strict.

정답:

Question No : 8

Which of the following is a searchable field in IPS?

A.update time
B.protection
C.threat year
D.release date

정답:

Question No : 9

What is true concerning the Threat Prevention Policy?

A.Multiple Threat Prevention Policies can be assigned to one Security Gateway.
B.The Threat Prevention Policy can override an Access Control Policy Drop or Reject.
C.In a case of a conflict, the Threat Prevention Policy takes precedence over an Access Control Policy.
D.The Threat Prevention Policy is only applied after traffic is accepted by Access Control Policy.

정답:

Question No : 10

What is necessary to do after an IPS Signature update?

A.Perform "Install Database".
B.Install the Threat Prevention Policy.
C.Those changes are immediately active.
D.Install the Access Control Policy.

정답:

Question No : 11

What action is taken by Threat Prevention for traffic that does not match any Threat Prevention rules?

A.Reject
B.Drop
C.Accept
D.Detect

정답:

Question No : 12

How are SNORT rules constructed?

A.The rule is contained on two lines. There are two logical sections: Rule Header and Rule Payload.
B.The rule is contained on two lines. There are two logical sections: Rule Header and Rule Options.
C.The rule is contained on one line. There are two logical sections: Rule Header and Rule Payload.
D.The rule is contained on a single line. There are two logical sections: Rule Header and Rule Options.

정답:

Question No : 13

What information is provided by "fwaccel stats"?

A.This command is to enable acceleration on QoS packets.
B.You can check the percentage of F2F connections along with the reason why those connections could not be accelerated.
C.The command is used to examine traffic utilization statistics.
D.You can check the SecureXL status of your Security Gateway.

정답:

Question No : 14

Are Cleanup Rules mandatory in a Threat Prevention Policy?

A.Cleanup Rules are not required if you are using the Basic Profile.
B.Cleanup Rules are only required, if the Access Control Policy does not have one.
C.Cleanup Rules are not strictly required in the Threat Prevention Policy.
D.A Cleanup Rule is required in a Basic Profile.

정답:

Question No : 15

What is the name of the default Threat Prevention Profile?

A.Basic
B.Standard
C.Strict
D.Optimized

정답:

Check Point 156-590 시험