156-315.80 시험 - Check Point실제시험문제와 답 - 375문항

Question No : 1

You have pushed policy to GW-3 and now cannot pass traffic through the gateway.
As a last resort, to restore traffic flow, what command would you run to remove the latest policy from GW-3?

A.fw unloadlocal
B.fw unloadpolicy
C.fwm unload local
D.fwm unload policy

정답:

Question No : 2

There are 4 ways to use the Management API for creating host object with R80 Management API .
Which one is NOT correct?

A.Using Web Services
B.Using Mgmt_cli tool
C.Using CLISH
D.Using SmartConsole GUI console
E.Events are collected with SmartWorkflow from Trouble Ticket systems

정답:

Question No : 3

What destination versions are supported for a Multi-Version Cluster Upgrade?

A.R80.40 and later
B.R76 and later
C.R70 and Later
D.R80.10 and Later

정답:

Question No : 4

What is not a component of Check Point SandBlast?

A.Threat Emulation
B.Threat Simulator
C.Threat Extraction
D.Threat Cloud

정답:

Question No : 5

Which NAT rules are prioritized first?

A.Post-Automatic/Manual NAT rules
B.Manual/Pre-Automatic NAT
C.Automatic Hide NAT
D.Automatic Static NAT

정답:

Question No : 6

What command can you use to have cpinfo display all installed hotfixes?

A.cpinfo -hf
B.cpinfo Cy all
C.cpinfo Cget hf
D.cpinfo installed_jumbo

정답:

Question No : 7

Within the Check Point Firewall Kernel resides Chain Modules, which are individually responsible for the inspection of a specific blade or feature that has been enabled in the configuration of the gateway. For Wire mode configuration, chain modules marked with _______ will not apply.

A.ffffffff
B.00000001
C.00000002
D.00000003

정답:

Question No : 8

You can select the file types that are sent for emulation for all the Threat Prevention profiles. Each profile defines a(n) _____ or _____ action for the file types.

A.Inspect/Bypass
B.Inspect/Prevent
C.Prevent/Bypass
D.Detect/Bypass

정답:

Question No : 9

Which of the following is NOT a type of Endpoint Identity Agent?

A.Terminal
B.Light
C.Full
D.Custom

정답:

Question No : 10

Which software blade does NOT accompany the Threat Prevention policy?

A.Anti-virus
B.IPS
C.Threat Emulation
D.Application Control and URL Filtering

정답:

Question No : 11

What is the minimum amount of RAM needed for a Threat Prevention Appliance?

A.6 GB
B.8GB with Gaia in 64-bit mode
C.4 GB
D.It depends on the number of software blades enabled

정답:

Question No : 12

In which formats can Threat Emulation forensics reports be viewed in?

A.TXT, XML and CSV
B.PDF and TXT
C.PDF, HTML, and XML
D.PDF and HTML

정답:

Question No : 13

To optimize Rule Base efficiency, the most hit rules should be where?

A.Removed from the Rule Base.
B.Towards the middle of the Rule Base.
C.Towards the top of the Rule Base.
D.Towards the bottom of the Rule Base.

정답:

Question No : 14

You have existing dbedit scripts from R77. Can you use them with R80.10?

A.dbedit is not supported in R80.10
B.dbedit is fully supported in R80.10
C.You can use dbedit to modify threat prevention or access policies, but not create or modify layers
D.dbedit scripts are being replaced by mgmt_cli in R80.10

정답:

Question No : 15

When configuring SmartEvent Initial settings, you must specify a basic topology for SmartEvent to help it calculate traffic direction for events .
What is this setting called and what are you defining?

A.Network, and defining your Class A space
B.Topology, and you are defining the Internal network
C.Internal addresses you are defining the gateways
D.Internal network(s) you are defining your networks

정답:

Check Point 156-315.80 시험