CheckPoint 156-215.76 問題集

質問 1：
In a distributed management environment, the administrator has removed all default check boxes from the Policy > Global Properties > Firewall tab. In order for the Security Gateway to send logs to the Security Management Server, an explicit rule must be created to allow the Security Gateway to communicate to the Security Management Server on port ______.
A. 256
B. 259
C. 257
D. 900
正解：C

質問 2：
You review this Security Policy because Rule 4 is inhibited.

Which Rule is responsible?
A. Rule 3
B. Rule 2
C. Rule 1
D. No rule inhibits Rule 4.
正解：B

質問 3：
You start to use SmartView Monitor to analyze the packet size distribution of your traffic.
Unfortunately, you get the message:
"There are no machines that contain Firewall Blade and SmartView Monitor."
What should you do to analyze the packet size distribution of your traffic? Give the BEST
answer.
A. Enable Monitoring on your Security Gateway.
B. Purchase the SmartView Monitor license for your Security Management Server.
C. Enable Monitoring on your Security Management Server.
D. Purchase the SmartView Monitor license for your Security Gateway.
正解：A

質問 4：
When translation occurs using automatic Hide NAT, what also happens?
A. The destination port is modified.
B. The source port is modified.
C. The destination is modified.
D. Nothing happens.
正解：B

質問 5：
You are the Security Administrator for MegaCorp and would like to view network activity using SmartReporter. You select a standard predefined report. As you can see here, you can select the london Gateway.

When you attempt to configure the Express Report, you are unable to select this Gateway.

What is the reason for this behavior? Give the BEST answer.
A. You must enable Monitoring in the london Gateway object's General Properties.
B. You must enable the Express Mode inside Eventia Reporter.
C. You have the license for Eventia Reporter in Standard mode only.
D. You must enable the Eventia Express Mode on the london Gateway.
正解：A

質問 6：
Which of the following statements BEST describes Check Point's Hide Network Address Translation method?
A. Translates many destination IP addresses into one destination IP address
B. One-to-one NAT which implements PAT (Port Address Translation) for accomplishing both Source and Destination IP address translation
C. Translates many source IP addresses into one source IP address
D. Many-to-one NAT which implements PAT (Port Address Translation) for accomplishing both Source and Destination IP address translation
正解：C

質問 7：
Which of the following statements accurately describes the command upgrade_export?
A. Used primarily when upgrading the Security Management Server, upgrade_export stores all object databases and the /conf directories for importing to a newer Security Gateway version.
B. This command is no longer supported in GAiA.
C. upgrade_export is used when upgrading the Security Gateway, and allows certain files to be included or excluded before exporting.
D. upgrade_export stores network-configuration data, objects, global properties, and the database revisions prior to upgrading the Security Management Server.
正解：A

質問 8：
What is a Consolidation Policy?
A. The specific Policy written in SmartDashboard to configure which log data is stored in the SmartReporter database.
B. The collective name of the Security Policy, Address Translation, and IPS Policies.
C. A global Policy used to share a common enforcement policy for multiple Security Gateways.
D. The collective name of the logs generated by SmartReporter.
正解：A

質問 9：
Which of these attributes would be critical for a site-to-site VPN?
A. Scalability to accommodate user groups
B. Strong authentication
C. Strong data encryption
D. Centralized management
正解：C