156-915.80 시험 - Check Point실제시험문제와 답 - 222문항

Question No : 1

What scenario indicates that SecureXL is enabled?

A.Dynamic objects are available in the Object Explorer
B.SecureXL can be disabled in cpconfig
C.fwaccel commands can be used in clish
D.Only one packet in a stream is seen in a fw monitor packet capture

정답:

Question No : 2

For best practices, what is the recommended time for automatic unlocking of locked admin accounts?

A.20 minutes
B.15 minutes
C.Admin account cannot be unlocked automatically
D.30 minutes at least

정답:

Question No : 3

Which features are only supported with R80.10 Gateways but not R77.x?

A.Access Control policy unifies the Firewall, Application Control & URL Filtering, Data Awareness, and Mobile Access Software Blade policies.
B.Limits the upload and download throughput for streaming media in the company to 1 Gbps.
C.The rule base can be built of layers, each containing a set of the security rules. Layers are inspected in the order in which they are defined, allowing control over the rule base flow and which security functionalities take precedence.
D.Time object to a rule to make the rule active only during specified times.

정답:
Explanation:
Reference: http://slideplayer.com/slide/12183998/

Question No : 4

In R80 spoofing is defined as a method of:

A.Disguising an illegal IP address behind an authorized IP address through Port Address Translation.
B.Hiding your firewall from unauthorized users.
C.Detecting people using false or wrong authentication logins
D.Making packets appear as if they come from an authorized IP address.

정답:
Explanation:
IP spoofing replaces the untrusted source IP address with a fake, trusted one, to hijack connections to your network. Attackers use IP spoofing to send malware and bots to your protected network, to execute DoS attacks, or to gain unauthorized access.
Reference: http://dl3.checkpoint.com/paid/74/74d596decb6071a4ee642fbdaae7238f/CP_R80_SecurityManagement_AdminGuide.pdf? HashKey=1479584563_6f823c8ea1514609148aa4fec5425db2&xtn=.pdf

Question No : 5

Fill in the blank: The R80 feature ________ permits blocking specific IP addresses for a specified time period.

A.Block Port Overflow
B.Local Interface Spoofing
C.Suspicious Activity Monitoring
D.Adaptive Threat Prevention

정답:

Question No : 6

Which of the following statements is TRUE about R80 management plug-ins?

A.The plug-in is a package installed on the Security Gateway.
B.Installing a management plug-in requires a Snapshot, just like any upgrade process.
C.A management plug-in interacts with a Security Management Server to provide new features and support for new products.
D.Using a plug-in offers full central management only if special licensing is applied to specific features of the plug-in.

정답:

Question No : 7

Fill in the blank: The command _______________ provides the most complete restoration of a R80 configuration.

A.upgrade_import
B.cpconfig
C.fwm dbimport Cp <export file>
D.cpinfo Crecover

정답:

Question No : 8

Tom has been tasked to install Check Point R80 in a distributed deployment.
Before Tom installs the systems this way, how many machines will be need if he does NOT include a SmartConsole machine in his calculations?

A.One machine, but it needs to be installed using SecurePlatform for compatibility purposes.
B.One machine
C.Two machines
D.Three machines

정답:

Question No : 9

You are working with multiple Security Gateways enforcing an extensive number of rules.
To simplify security administration, which action would you choose?

A.Eliminate all possible contradictory rules such as the Stealth or Cleanup rules.
B.Create a separate Security Policy package for each remote Security Gateway.
C.Create network objects that restrict all applicable rules to only certain networks.
D.Run separate SmartConsole instances to login and configure each security Gateway directly.

정답:

Question No : 10

Fill in the blank: The R80 utility fw monitoris used to troubleshoot __________.

A.User data base corruption
B.LDAP conflicts
C.Traffic issues
D.Phase two key negotiation

정답:

Question No : 11

Fill in the blank: The tool ___________ generates a R80 Security Gateway configuration report.

A.infoCP
B.infoview
C.cpinfo
D.fw cpinfo

정답:

Question No : 12

When doing a Stand-Alone Installation, you would install the Security Management Server with which other Check Point architecture component?

A.None, Security Management Server would be installed by itself
B.SmartConsole
C.SecureClient
D.SmartEvent

정답:

Question No : 13

The Security Gateway is installed on GAiA R80. The default port for the Web User Interface is _______.

A.TCP 18211
B.TCP 257
C.TCP 4433
D.TCP 443

정답:

Question No : 14

In which case is a Sticky Decision Function relevant?

A.Load Sharing C Multicast
B.Load Balancing C Forward
C.High Availability
D.Load Sharing C Unicast

정답:

Question No : 15

In Gaia, if one is unsure about a possible command, what command lists all possible commands.

A.show all |grep commands
B.show configuration
C.show commands
D.get all commands

정답:
Explanation:
Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Gaia_WebAdmin/75697.htm

Check Point 156-915.80 시험