CheckPoint 156-315.81.20 실제 시험문제 및 답변

문제1
What Factor preclude Secure XL Templating?

A. ClusterXL in load sharing Mode

B. IPS

C. Source Port Ranges/Encrypted Connections

D. CoreXL

정답: C

문제2
Which statement is correct about the Sticky Decision Function?

A. It is automatically disabled if the Mobile Access Software Blade is enabled on the cluster

B. Does not support SPI's when configured for Load Sharing

C. It is not supported with either the Performance pack of a hardware based accelerator card

D. It is not required L2TP traffic

정답: C

문제3
Fill in the blank: With the User Directory Software Blade, you can create user definitions on a(n)_____________ Server.

A. SecurID

B. LDAP

C. SMTP

D. NT domain

정답: B

문제4
What are valid Policy Types in R81.X?

A. Access Control, RemoteAccess VPN, NAT, IPS

B. Access Control, IPS, Threat Emulation, NAT

C. Access Control, IPS, QoS, DLP

D. Access Control, Threat Prevention, QoS, Desktop Security

정답: C

문제5
Fill in the blank: Authentication rules are defined for ________ .

A. Users using UserCheck

B. All users in the database

C. User groups

D. Individual users

정답: C

문제6
Which TCP port does the CPM process listen on?

A. 8983

B. 19009

C. 18190

D. 18191

정답: B

문제7
Which one of the following is true about Threat Extraction?

A. Delivers file only if no threats found

B. Always delivers a file to user

C. Can take up to 3 minutes to complete

D. Works on all MS Office, Executables, and PDF files

정답: B

문제8
Which of the following Windows Security Events will not map a username to an IP address in Identity Awareness?

A. Kerberos Ticket Renewed

B. Kerberos Ticket Requested

C. Kerberos Ticket Timed Out

D. Account Logon

정답: C

문제9
Which of the following is NOT an attribute of packet acceleration?

A. Source address

B. Destination port

C. VLAN Tag

D. Protocol

정답: C

문제10
What is mandatory for ClusterXL to work properly?

A. The Sync interface must not have an IP address configured

B. If you have "Non-monitored Private" interfaces, the number of those interfaces must be the same on all cluster members

C. The number of cores must be the same on every participating cluster node

D. The Magic MAC number must be unique per cluster node

정답: D

문제11
Vanessa is firewall administrator in her company. Her company is using Check Point firewall on a central and several remote locations which are managed centrally by R77.30 Security Management Server. On central location is installed R77.30 Gateway on Open server. Remote locations are using Check Point UTM-1570 series appliances with R75.30 and some of them are using a UTM-1-Edge-X or Edge-W with latest available firmware. She is in process of migrating to R81.
What can cause Vanessa unnecessary problems, if she didn't check all requirements for migration to R81?

A. Unsupported appliances on remote locations

B. Unsupported version on UTM-1 570 series appliance

C. Missing an installed R77.20 Add-on on Security Management Server

D. Unsupported firmware on UTM-1 Edge-W appliance

정답: C

문제12
What is the correct command to observe the Sync traffic in a VRRP environment?

A. fw monitor -e "accept proto=mcVRRP;"

B. fw monitor -e "accept dst=224.0.0.18;"

C. fw monitor -e "accept port(6118;"

D. fw monitor -e "accept[12:4,b]=224.0.0.18;"

정답: B

문제13
Which of the following is NOT an option to calculate the traffic direction?

A. Internal

B. Outgoing

C. External

D. Incoming

정답: B

문제14
How can SmartView application accessed?

A. https://<Security Management host name>:4434/smartview/

B. https://<Security Management IP Address>/smartview/

C. http://<Security Management IP Address>:4434/smartview/

D. http://<Security Management IP Address>/smartview

정답: B

문제15
Which of the following statements about SecureXL NAT Templates is true?

A. ACCEPT Templates are generated to achieve high session rate for NAT. These templates store the NAT attributes of connections matched by rulebase so that similar new connections can take advantage of this information and do NAT without the expensive rulebase lookup. These are disabled by default and work only if NAT Templates are disabled.

B. NAT Templates are generated to achieve high session rate for NAT. These templates store the NAT attributes of connections matched by rulebase so that similar new connections can take advantage of this information and do NAT without the expensive rulebase lookup. These are disabled by default and work only if Accept Templates are disabled.

C. DROP Templates are generated to achieve high session rate for NAT. These templates store the NAT attributes of connections matched by rulebase so that similar new connections can take advantage of this information and do NAT without the expensive rulebase lookup. These are disabled by default and work only if NAT Templates are disabled.

D. NAT Templates are generated to achieve high session rate for NAT. These templates store the NAT attributes of connections matched by rulebase so that similar new connections can take advantage of this information and do NAT without the expensive rulebase lookup. These are enabled by default and work only if Accept Templates are enabled.

정답: D

최신CheckPoint Check Point Certified Security Expert - R81.20 - 156-315.81.20무료샘플문제

자격증의 중요성:

ExamPassdump 제품의 가치:

무료샘플 받아보기:

완벽한 서비스 제공: