CheckPoint 156-115.77 問題集

質問 1：
You are troubleshooting a VPN issue between your gateway and a partner site and you get a drop log on your gateway that states "Clear text packet should be encrypted". Which of the following would be the best troubleshooting step?
A. Use the excluded services in the VPN community to exclude this traffic from the VPN or determine why the traffic is leaving local (your) gateway as clear text.
B. Your phase one algorithms are mismatched between gateways.
C. Use the excluded services in the VPN community to exclude this traffic from the VPN or determine why the traffic is leaving the initiating (partner) gateway as clear text.
D. This is management traffic and we need to enable implied rule to address this issue.
正解：C

質問 2：
In IPS what does a high confidence rating mean?
A. This is a rating for how likely this attack is to penetrate most systems
B. There is a low likelihood of false positives
C. This is a rating for how confident Check Point is with catching this attack
D. There is a high likelihood of false positives
正解：B

質問 3：
The fw tab -t ___________ command displays the NAT table.
A. fwx_alloc
B. conns
C. loglist
D. tablist
正解：A

質問 4：
The command that lists the firewall kernel modules on a Security Gateway is:
A. fw list kernel modules
B. fw ctl kernel chain
C. fw ctl debug -m
D. fw list modules
正解：C

質問 5：
Which directory below contains the URL Filtering engine update info? Here you can also go to see the status of the URL Filtering and Application Control updates.
A. $FWDIR/urlf/update
B. $FWDIR/appi/update
C. $FWDIR/update/appi
D. $FWDIR/appi/urlf
正解：B

質問 6：
A firewall has 8 CPU cores and the correct license. CoreXL is enabled. How could you set kernel instance #3 to run on processing core #5?
A. Run fwaffinity_apply -t 3 -k 5 and then check that the settings have taken affect with the command fw ctl multik stat.
B. This is not possible CoreXL is best left to manage the Kernel to CPU core mappings. It is only when a daemon is bound to a dedicated core that CoreXL will ignore that CPU core when mapping Kernel instances to CPU cores.
C. Edit the file fwaffinity.conf and add the line "k3 cpuid 5"
D. fw ctl affinity -s -k 3 5
正解：D

質問 7：
From the output of the following cphaprob -i list, what is the most likely cause of the clustering issue?
Cluster B> cphaprob -i list Built-in Devices: Device Name: Interface Active Check Current state: OK Device Name: HA Initialization Current state: OK Device Name: Recovery Delay Current state: OK Registered Devices: Device Name: Synchronization Registration number: 0 Timeout: none Current state: OK Time
since last report: 3651.5 sec
Device Name: Filter Registration number: 1 Timeout: none Current state: problem Time since last report: 139 sec Device Name: routed Registration number: 2 Timeout: none Current state: OK Time since last
report: 3651.9 sec
Device Name: cphad Registration number: 3 Timeout: none Current state: OK Time since last report: 3696.5 sec Device Name: fwd Registration number: 4 Timeout: none Current state: OK Time since last report:
3696.5 sec
A. There is an interface down on Cluster A
B. The routing table on Cluster B is different from Cluster A
C. Cluster B and Cluster A have different versions of policy installed.
D. There is a sync network issue between Cluster A and Cluster B
正解：C