156-215.81.20試験無料問題集（400題）「CheckPoint Check Point Certified Security Administrator R81.20 認定」

出題：1

When URL Filtering is set, what identifying data gets sent to the Check Point Online Web Service?

A. The host part of the URL is sent to the Check Point Online Web Service

B. The full URL, including page data, is sent to the Check Point Online Web Service

C. The URL and server certificate are sent to the Check Point Online Web Service

D. The URL and IP address are sent to the Check Point Online Web Service

正解：A 解答を投票する

出題：2

Name the file that is an electronically signed file used by Check Point to translate the features in the license into a code?

A. Contract file (.xml)

B. license File (.lie)

C. cp.macro

D. Both License (.lic) and Contract (.xml) files

正解：C 解答を投票する

出題：3

What does it mean if Deyra sees the gateway status:

Choose the BEST answer.

A. VPN software blade is reporting a malfunction

B. SmartCenter Server cannot reach this Security Gateway

C. Security Gateway's MGNT NIC card is disconnected.

D. There is a blade reporting a problem

正解：D 解答を投票する

出題：4

Which two of these Check Point Protocols are used by?

A. FWD and CPLOG

B. FWD and LEA

C. ELA and CPLOG

D. ELA and CPD

正解：B 解答を投票する

出題：5

What object type would you use to grant network access to an LDAP user group?

A. Access Role

B. User Group

C. Group Template

D. SmartDirectory Group

正解：B 解答を投票する

出題：6

What SmartEvent component creates events?

A. Correlation Unit

B. Consolidation Policy

C. SmartEvent GUI

D. SmartEvent Policy

正解：A 解答を投票する

出題：7

What is a role of Publishing?

A. The Security Management Server installs the updated policy and the entire database on Security Gateways

B. The Publish operation sends the modifications made via SmartConsole in the private session and makes them public

C. Modifies network objects, such as servers, users, services, or IPS profiles, but not the Rule Base

D. The Security Management Server installs the updated session and the entire Rule Base on Security Gateways

正解：B 解答を投票する

出題：8

You noticed that CPU cores on the Security Gateway are usually 100% utilized and many packets were dropped. You don't have a budget to perform a hardware upgrade at this time. To optimize drops you decide to use Priority Queues and fully enable Dynamic Dispatcher.
How can you enable them?

A. fw ctl multik dynamic_dispatching on

B. fw ctl multik dynamic_dispatching set_mode 9

C. fw ctl multik set_mode 9

D. fw ctl miltik pq enable

正解：C 解答を投票する

出題：9

The CDT utility supports which of the following?

A. All upgrades

B. Major version upgrades to R77.30

C. Only Jumbo HFA's and hotfixes

D. Only major version upgrades to R80.10

正解：A 解答を投票する

出題：10

Which command shows the installed licenses in Expert mode?

A. print cplic

B. fwlic print

C. cplic print

D. show licenses

正解：C 解答を投票する

出題：11

What is the purpose of the Stealth Rule?

A. To prevent users from directly connecting to a Security Gateway.

B. To reduce the amount of logs for performance issues.

C. To reduce the number of rules in the database.

D. To hide the gateway from the Internet.

正解：A 解答を投票する

出題：12

True or False: The destination server for Security Gateway logs depends on a Security Management Server configuration.

A. True, all Security Gateways will only forward logs with a SmartCenter Server configuration

B. False, log servers are enabled on the Security Gateway General Properties

C. False, log servers are configured on the Log Server General Properties

D. True, all Security Gateways forward logs automatically to the Security Management Server

正解：A 解答を投票する

出題：13

What are the three components for Check Point Capsule?

A. Capsule Workspace, Capsule Docs, Capsule Connect

B. Capsule Workspace, Capsule Cloud, Capsule Connect

C. Capsule Workspace, Capsule Docs, Capsule Cloud

D. Capsule Docs, Capsule Cloud, Capsule Connect

正解：C 解答を投票する

出題：14

In R80 Management, apart from using SmartConsole, objects or rules can also be modified using:

A. 3rd Party integration of CLI and API for Gateways prior to R80.

B. A complete CLI and API interface using SSH and custom CPCode integration.

C. A complete CLI and API interface for Management with 3rd Party integration.

D. 3rd Party integration of CLI and API for Management prior to R80.

正解：B 解答を投票する

出題：15

How do logs change when the "Accounting" tracking option is enabled on a traffic rule?

A. Provides additional information to the connected user.

B. Provides log details view email to the Administrator.

C. Involved traffic logs are updated every 10 minutes to show how much data has passed on the connection.

D. Involved traffic logs will be forwarded to a log server.

正解：C 解答を投票する

出題：16

An administrator can use section titles to more easily navigate between large rule bases.
Which of these statements is FALSE?

A. A Sectional Title can be used to disable multiple rules by disabling only the sectional title.

B. Section titles are not sent to the gateway side.

C. These sections are simple visual divisions of the Rule Base and do not hinder the order of rule enforcement.

D. Sectional Titles do not need to be created in the SmartConsole.

正解：A 解答を投票する

出題：17

Fill in the blanks: The Application Layer Firewalls inspect traffic through the ______ layer(s) of the TCP/IP model and up to and including the ______ layer.

A. Lower; Application

B. First two; Internet

C. Upper; Application

D. First two; Transport

正解：A 解答を投票する

出題：18

Fill in the blank: With the User Directory Software Blade, you can create user definitions on a(n)
___________ Server.

A. SMTP

B. LDAP

C. NT domain

D. SecurID

正解：B 解答を投票する

出題：19

Which one of the following is a way that the objects can be manipulated using the new API integration in R80 Management?

A. RC4 Encryption

B. Microsoft Publisher

C. Microsoft Word

D. JSON

正解：D 解答を投票する

156-215.81.20試験無料問題集「CheckPoint Check Point Certified Security Administrator R81.20 認定」