CheckPoint 156-115.77 問題集

質問 1：
You are adding a new gateway into your network. You must make sure that it is running the latest Corporate approved IPS profile. How can you get this information to your new gateway?
A. From the command line, run: ips_export_import import <new-profile-name> -f <file-name> [-p <ip>].
B. From the command line, run: ips_import <new-profile-name> -f <file-name> [-p <ip>].
C. From the Smart Dashboard IPS tab select import IPS profiles and select the gateway to get the profile from.
D. IPS profiles must be manually configured on each gateway.
正解：A

質問 2：
What utility would you use to configure route-based VPNs?
A. vpn set_slim_server
B. vpn tu
C. vpn shell
D. vpn sw_topology
正解：C

質問 3：
You are troubleshooting your VPN and are reviewing the output of your command fw monitor, shown below. What can you determine from the following output?

Checkpoint 156-115.77 Exam
A. The fw monitor command cannot display the relevant information since it is encrypted traffic
B. There is no issue, since the traffic is being seen at all points in the inspection kernel
C. NAT is not being applied to the IP address 10.10.10.86
D. Traffic is not being encrypted
正解：D

質問 4：
When are rules that include Identity Awareness Access (IDA) roles accelerated through SecureXL?
A. Always, the inclusion of an IDA role guarantees the connection for the rule is accelerated.
B. The inclusion of an IDA role has no bearing on whether the connection for the rule is accelerated.
C. Only when 'Unauthenticated Guests' is included in the access role.
D. Never, the inclusion of an IDA role disables SecureXL.
正解：B

質問 5：
Extended Cluster Anti-Spoofing checks what value to determine if a packet with the source IP of a gateway in the cluster is being spoofed?
A. The source IP of the packet.
B. The destination IP of the packet.
C. The packet has a TTL value of less than 255.
D. The source MAC address of the packet.
正解：C

質問 6：
What flag option(s) must be used to dump the complete table in friendly format, assuming there are more than one hundred connections in the table?
A. fw tab -t connections -f -u
B. fw tab -t connections -f
C. fw tab -t connections -s
D. fw tab -t connect -f -u
正解：D

質問 7：
What would be a reason to use the command cphaosu stat?
A. To see the policy install dates on each of the members in the cluster.
B. To determine the number of connections from OPSEC software using Open Source Licenses.
C. To decide when to fail over traffic to a new cluster member.
D. This is not a valid command.
正解：C