156-215-75試験無料問題集（543題）「CheckPoint Check Point Certified Security Administrator R75 認定」

出題：1

How do you configure an alert in SmartView Monitor?

A. By right-clicking on the Gateway, and selecting Properties.

B. By choosing the Gateway, and Configure Thresholds.

C. By right-clicking on the Gateway, and selecting System Information.

D. An alert cannot be configured in SmartView Monitor.

正解：B 解答を投票する

出題：2

Where does the security administrator activate Identity Awareness within SmartDashboard?

A. LDAP Server Object > General Properties

B. Security Management Server > Identity Awareness

C. Policy > Global Properties > Identity Awareness

D. Gateway Object > General Properties

正解：D 解答を投票する

出題：3

Your manager requires you to setup a new corporate VPN between all your branch offices. He requires you to choose the strongest and most secure available algorithms for the headquarters to the Research and Development branch office. In addition, you must use high performance algorithms for all sales offices with shorter key length for the VPN keys. How would you configure this scenario?

A. This can be done in a single community, but the encrypt action in the security Rule Base needs to be configured for exceptions.

B. This can be done either in traditional mode or simplified VPN using 2 different communities and the headquarters as the center for both communities.

C. This can not be achieved at all as all algorithms need to be the very same for all VPNs.

D. This can only be done in traditional mode VPNs while not using simplified VPN settings.

正解：B 解答を投票する

出題：4

Which of the following is an authentication method used by Identity Awareness?

A. PKI

B. SSL

C. LDAP

D. RSA

正解：C 解答を投票する

出題：5

What is the purpose of a Stealth Rule?

A. To drop all traffic to the management server that is not explicitly permitted

B. To permit management traffic

C. To prevent users from connecting directly to the gateway

D. To permit implied rules

正解：C 解答を投票する

出題：6

Suppose the Security Gateway hard drive fails and you are forced to rebuild it. You have a snapshot file stored to a TFTP server and backups of your Security Management Server. What is the correct procedure for rebuilding the Gateway quickly?

A. Reinstall the base operating system (i.e., SecurePlatform). Configure the Gateway interface so that the Gateway can communicate with the TFTP server. Reinstall any necessary Check Point products and previously applied hotfixes. Revert to the stored snapshot image, and install the Policy.

B. Run the revert command to restore the snapshot. Reinstall any necessary Check Point products. Establish SIC and install the Policy.

C. Run the revert command to restore the snapshot, establish SIC, and install the Policy.

D. Reinstall the base operating system (i.e., SecurePlatform). Configure the Gateway interface so that the Gateway can communicate with the TFTP server. Revert to the stored snapshot image, and install the Security Policy.

正解：D 解答を投票する

出題：7

User Mark is requesting a Website while he is using a computer out of the net_singapore network.

Checkpoint 156-215.75 : Practice Test
What is TRUE about his location restriction?

A. Source setting in Source column always takes precedence

B. As location restrictions add up, he would be allowed from net_singapore and net_sydney.

C. Source setting in User Properties always takes precedence.

D. It depends on how the User Auth object is configured; whether User Properties or Source Restriction takes precedence.

正解：D 解答を投票する

出題：8

How many packets does the IKE exchange use for Phase 1 Aggressive Mode?

A. 1

B. 6

C. 12

D. 3

正解：D 解答を投票する

出題：9

Several Security Policies can be used for different installation targets. The Firewall protecting Human Resources' servers should have its own Policy Package. These rules must be installed on this machine and not on the Internet Firewall. How can this be accomplished?

A. When selecting the correct Firewall in each line of the row Install On of the Rule Base, only this Firewall is shown in the list of possible installation targets after selecting Policy / Install on Target.

B. A Rule Base can always be installed on any Check Point Firewall object. It is necessary to select the appropriate target directly after selecting Policy / Install on Target.

C. A Rule Base is always installed on all possible targets. The rules to be installed on a Firewall are defined by the selection in the row Install On of the Rule Base.

D. In the menu of SmartDashboard, go to Policy / Policy Installation Targets and select the correct firewall via Specific Targets.

正解：D 解答を投票する

出題：10

What is the command used to view which policy is installed?

A. fw stat

B. fw ctl install

C. fwm stat

D. fw ctl pstat

正解：A 解答を投票する

出題：11

Users with Identity Awareness Agent installed on their machines login with __________, so that when the user logs into the domain, that information is also used to meet Identity Awareness credential requests.

A. ICA Certificates

B. Single Sign-On

C. Key-logging

D. SecureClient

正解：B 解答を投票する

出題：12

Which of the following items should be configured for the Security Management Server to authenticate via LDAP?

A. Check Point Password

B. Windows logon password

C. WMI object

D. Active Directory Server object

正解：D 解答を投票する

出題：13

Which of the following authentication methods can be configured in the Identity Awareness setup wizard?

A. Check Point Password

B. Windows password

C. TACAS

D. Captive Portal

正解：D 解答を投票する

出題：14

UDP packets are delivered if they are _________.

A. A legal response to an allowed request on the inverse UDP ports and IP

B. A Stateful ACK to a valid SYN-SYN-/ACK on the inverse UDP ports and IP

C. Reference in the SAM related Dynamic tables

D. Bypassing the Kernel by the "forwarding layer" of clusterXL

正解：A 解答を投票する

出題：15

When you change an implicit rule's order from last to first in global properties, how do you make the change take effect?

A. Reinstall the security policy

B. Select install database from the policy menu

C. Select save from the file menu

D. Run fw fetch from the security gateway

正解：A 解答を投票する

出題：16

Your customer wishes to install the SmartConsole on a Windows system. What are the minimum hardware requirements for R75? Give the BEST answer.

A. 1 GB Free disk space and 512 MB RAM

B. 1 GB Free disk space and 1 GB RAM

C. 512 MB Free disk space and 1 GB RAM

D. 500 MB Free disk space and 512 MB RAM

正解：D 解答を投票する

出題：17

Which of the following commands can be used to remove site-to-site IPsec Security Association (SA)?

A. fw ipsec tu

B. vpn tu

C. vpn debug ipsec

D. vpn ipsec

正解：B 解答を投票する

156-215-75試験無料問題集「CheckPoint Check Point Certified Security Administrator R75 認定」