CheckPoint 156-315 問題集

質問 1：
Wayne configures an HTTP Security Server to work with the content vectoring protocol to screen forbidden sites. He has created a URI resource object using CVP with the following settings:
Use CVP
Allow CVP server to modify content
Return data after content is approved
He adds two rules to his Rule Base: one to inspect HTTP traffic going to known forbidden sites, the other to allow all other HTTP traffic.
Wayne sees HTTP traffic going to those problematic sites is not prohibited.
What could cause this behavior?
A. The Security Server is not configured correctly.
B. The Security Server is not communicating with the CVP server.
C. The Security Server is communicating with the CVP server, but no restriction is defined in the CVP server.
D. The Security Server Rule is after the general HTTP Accept Rule.
正解：D

質問 2：
Which of the following commands shows full synchronization status?
A. fw ctl pstat
B. cphastop
C. cphaprob -a if
D. cphaprob -i list
E. fw hastat
正解：D

質問 3：
Your organization has many VPN-1 Edge gateways at various branch offices, to allow VPN-1 SecureClient users to access company resources. For security reasons, your organization's Security Policy requires all Internet traffic initiated behind the VPN-1 Edge gateways first be inspected by your headquarters' VPN-1 Pro Security Gateway. How do you configure VPN routing in this star VPN Community?
A. To the Internet and other targets only
B. To the center only
C. To the center and other satellites, through the center
D. To the center; or through the center to other satellites, then to the Internet and other VPN targets
正解：D

質問 4：
You are preparing to configure your VoIP Domain Gatekeeper object. Which two other objects should you have created first?
A. An object to represent the PSTN phone network, AND an object to represent the IP phone network
B. An object to represent the IP phone network, AND an object to represent the host on which the gatekeeper is installed
C. An object to represent the Q.931 service origination host, AND an object to represent the H.245 termination host
D. An object to represent the IP phone network, AND an object to represent the host on which the proxy is installed
E. An object to represent the call manager, AND an object to represent the host on which the transmission router is installed
正解：B

質問 5：
DShield is a Check Point feature used to block which of the following threats?
A. Trojan horses
B. DDOS
C. SQL injection
D. Cross Site Scripting
E. Buffer overflows
正解：B

質問 6：
Cody is notified by blacklist.org that his site has been reported as a spam relay, due to his SMTP Server being unprotected. Cody decides to implement an SMTP Security Server, to prevent the server from being a spam relay. Which of the following is the most efficient configuration method?
A. Configure the SMTP Security Server to work with an OPSEC based product, for content checking.
B. Configure the SMTP Security Server to perform filtering, based on IP address and SMTP protocols.
C. Configure the SMTP Security Server to perform MX resolving.
D. Configure the SMTP Security Server to allow only mail to or from names, within Cody's corporate domain.
E. Configure the SMTP Security Server to apply a generic "from" address to all outgoing mail.
正解：D

質問 7：
How does ClusterXL Unicast mode handle new traffic?
A. All members receive all packets. The SmartCenter Server decides which member will process the packets. Other members simply drop the packets.
B. All cluster members process all packets, and members synchronize with each other.
C. The pivot machine receives and inspects all new packets, and synchronizes the connections with other members.
D. Only the pivot machine receives all packets. It runs an algorithm to determine which member should process the packets.
正解：D

質問 8：
You are reviewing SmartView Tracker entries, and see a Connection Rejection on a Check Point QoS rule. What causes the Connection Rejection?
A. No QOS rule exists to match the rejected traffic.
B. Burst traffic matching the Default Rule is exhausting the Check Point QoS global packet buffers.
C. The Constant Bit Rate for a Low Latency Class has been exceeded by greater than
10%, and the Maximal Delay is set below requirements.
D. The number of guaranteed connections is exceeded. The rule's action properties are not set to accept additional connections.
E. The guarantee of one of the rule's sub-rules exceeds the guarantee in the rule itself.
正解：D