CheckPoint 156-115.77 問題集

質問 1：
Your customer reports that the time on the standby cluster member is not correct. After failing over and making it active, the time is now correct. NTP has been configured on both machines, so it is expected that both machines be in sync with the NTP server. Upon investigating, it was found that the standby member was never able to communicate with the NTP server while it was in standby configuration. What could be the problem?
A. Routing prevents the standby member from performing functions such as peering with dynamic routing and obtaining NTP updates.
B. Traffic from the standby member was hidden behind the cluster IP address and was therefore returning to the active member.
C. You should be syncing your backup to the primary for time settings.
D. NTP is not supported in active-passive mode.
正解：B

質問 2：
You are troubleshooting an issue for your HR team. One of the users is using IP 10.10.10.24.
They having been trying to access the vacation servers but all connections are failing. You have checked the logs and do not see any dropped traffic. You have a suspicion that the drop is not being logged. What command could you use to confirm this?
A. fw ctl pstat host 10.10.10.24
B. fw ctl zdebug + log dynlog
C. fw -t connections -s
D. You cannot run a command for this; you must enable logging on all rules
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 3：
A fwm debug provides the following output. What prevents the customer from logging into SmartDashboard?

A. There are not any policy to login in SmartDashboard
B. User and password are incorrect
C. FWM process is crashed and returned null to access
D. IP not defined in $FWDIR/conf/gui-clients
正解：D

質問 4：
How do you set up Port Address Translation?
A. Port Address Translation is not support in Check Point environment
B. Since Hide NAT changes to random high ports it is by definition PAT (Port Address Translation).
C. Edit the service in SmartDashboard, click on the NAT tab and specify the translated port.
D. Create a manual NAT rule and specify the source and destination ports.
正解：D

質問 5：
What is the command to check how many connections the firewall has detected for the SecureXL device?
A. fw tab -t connection -s | grep template
B. fwaccel conns
C. fw tab -t cphwd_db -s
D. fw tab -t connections -s
正解：C

質問 6：
What happens to manual changes in the file $FWDIR/conf/local.arp when adding Proxy ARP entries through the GAiA portal or Clish?
A. If the file $FWDIR/conf/local.arp has been edited manually, you are not able to add Proxy ARP entries through the GAiA portal or Clish.
B. Nothing.
C. They are overwritten.
D. They are merged with the new entries added from the GAiA Portal / Clish.
正解：C

質問 7：
Where can you configure OSPF on a GAiA firewall?
A. sysconfig
B. cpconfig
C. SmartDashboard
D. WebUI
正解：D