156-315.77試験無料問題集（755題）「CheckPoint Check Point Certified Security Expert 認定」

出題：1

What is the command to upgrade a SecurePlatform NG with Application Intelligence (Al) R55 SmartCenter Server to VPN-1 NGX using a CD?

A. patch add

B. patch add cd

C. cppkg add

D. cd patch add

E. fwm upgrade_tool

正解：B 解答を投票する

出題：2

Which statements about Management HA are correct?
1 ) Primary SmartCenter describes first installed SmartCenter
2 ) Active SmartCenter is always used to administrate with SmartConsole
3 ) Active SmartCenter describes first installed SmartCenter
4 ) Primary SmartCenter is always used to administrate with SmartConsole

A. 2 and 3

B. 1 and 2

C. 1 and 4

D. 3 and 4

正解：B 解答を投票する

出題：3

Given the following protection detailed and the enforcing gateways list, is the Tool many DNS queries with the RD flag set protection enabled on the Gateway R76?

Please choose the answer with the correct justification.

A. yes because it is set to prevent on the Default_Protection, which R76 gateway has applied.

B. No, because the Too many DNS queries with the flag set protection is not a valid protection in R76.

C. No because the protection is only supported on IPS-1 Sensor.

D. No enough information to determine one way or other.

正解：C 解答を投票する

出題：4

_____ is a proprietary Check Point protocol. It is the basis for Check Point ClusterXL inter- module communication.

A. CCP

B. CPP

C. CPHA

D. CKPP

正解：A 解答を投票する

出題：5

Included in the customer's network are some firewall systems with the Performance Pack in use. The customer wishes to use these firewall systems in a cluster (Load Sharing mode). He is not sure if he can use the Sticky Decision Function in this cluster. Explain the situation to him.

A. Sticky Decision Function is not supported when employing either Performance Pack or a hardware-based accelerator card. Enabling the Sticky Decision Function disables these acceleration products.

B. ClusterXL always supports the Sticky Decision Function in the Load Sharing mode.

C. The customer can use the firewalls with Performance Pack inside the cluster, which should support the Sticky Decision Function. It is just necessary to enable the Sticky Decision Function in the SmartDashboard cluster object in the ClusterXL page, Advanced Load Sharing Configuration window.

D. The customer can use the firewalls with Performance Pack inside the cluster, which should support the Sticky Decision Function. It is just necessary to configure it with the clusterXL_SDF_enable command.

正解：A 解答を投票する

出題：6

What are the SmartProvisioning Provisioning Profile indicators?

A. OK, In Use. Out of date, not used

B. OK, Needs Attention, Uninitialized, Unknown

C. OK, Waiting, Unknown, Not Installed, Not Updated, May be out of date

D. OK, Needs Attention, Agent is in local mode, Uninitialized, Unknown

正解：D 解答を投票する

出題：7

What is used to validate a digital certificate?

A. IPsec

B. PKCS

C. CRL

D. S/MIME

正解：C 解答を投票する

出題：8

Which of the following commands do you run on the AD server to identify the DN name before configuring LDAP integration with the Security Gateway?

A. cpquery -name administrator

B. ldapquery -name administrator

C. dsquery user -name administrator

D. query ldap -name administrator

正解：C 解答を投票する

出題：9

The process _____ is responsible for all other security server processes run on the Gateway.

A. FWD

B. FWSSD

C. FWM

D. CPD

正解：A 解答を投票する

出題：10

Does Check Point recommend generating an upgrade_export on standby SmartCenters?

A. Yes. All information is available at both SmartCenters.

B. No. All Check Point processes are stopped.

C. Yes. This is the only way to get the upgrade_export

D. No. There is no way to verify the actual configuration.

正解：D 解答を投票する

出題：11

CORRECT TEXT
Fill in the blank.
Type the command and syntax to view critical devices on a cluster member in a ClusterXL environment.

正解：

cphaprob -ia list

出題：12

UserA is able to create a SmartLSM Security Cluster Profile , you must select the correct justification.

A. True Only Object Database Read/Write permissions are required to create SmartLSM Profiles.

B. False The user must have Read/Write permissions for the SmartLSM Gateways Database.

C. Not enough information to determine. You must know the user's Provisioning permissions to determine whether they are able to create a SmartLSM Security Cluster Profile

D. False. The user must have at least Read permissions for the SmartLSM Gateways Database.

正解：C 解答を投票する

出題：13

There are several SmartDirectory (LDAP) features that can be applied to further enhance SmartDirectory (LDAP) functionality, which of the following is NOT one of those features?

A. Encrypted or non-encrypted SmartDirectory (LDAP) Connections usage

B. Support multiple SmartDirectory (LDAP) servers on which many user databases are distributed

C. High Availability, where user information can be duplicated across several servers

D. Support many Domains under the same account unit

正解：D 解答を投票する

出題：14

Assuming all connections that are allocated bandwidth in your Check Point QoS Rule Base are open, what would be the corresponding bandwidth percentage of the Kazaa Rule in the following example?

A. 20%

B. 8%

C. 14%

D. 5%

正解：C 解答を投票する

出題：15

While using the SmartProvisioning Wizard to create a new profile, you cannot continue because there are no devices to select. What is a possible reason for this?
i) All devices already have a profile assigned to them
ii) Provisioning Blade is not enabled on the devices
iii) No UTM- 1/Power- 1/Secure Platform devices are defined in Smart Dashboard iv) SIC is not established on the devices.

A. (i) or (iii)

B. (iii) or (iv)

C. (ii) only

D. (ii), (iii) or (iv)

正解：A 解答を投票する

156-315.77試験無料問題集「CheckPoint Check Point Certified Security Expert 認定」