CheckPoint 156-727.77 問題集

質問 1：
What is the name of the Check Point cloud-driven Knowledgebase?
A. ThreatEmulator
B. ThreatCloud
C. ThreatWiki
D. ThreatSpect
正解：C

質問 2：
Which of the following statements regarding the threat prevention database is NOT correct?
A. The security gateway contains a local cache of the malware requests.
B. By default, updates run on the security gateway every two hours.
C. The malware database only updates if you have a valid Anti-Bot/ or Anti-Virus contract.
D. The Security management server connects to the internet to get Malware Database updates.
正解：D

質問 3：
Joey is the MegaCorp Firewall administrator. Which options does he have for the configuration of the Threat Emulation Analysis Location on his gateway?
A. Either Check Point Threat Cloud or locally (dedicated or existing gateway)
B. It depends on the operating systems that need to be supported
C. Upload the Files to the Check Point SFTP-Server
D. Only Check Point Threat Cloud
正解：A

質問 4：
Sensitive corporate data is uploaded to ThreatCloud:
A. After the bot attack has been confirmed.
B. Never
C. When the administrator manually sends suspected traffic to ThreatCloud for inspection.
D. When the administrator configures the sensor to be a SensorNET participant.
正解：B

質問 5：
Damage from a bot attack can take place after the bot compromises a machine. Which of the following represents the order by which this process takes place? The bot:
A. penetrates the organization, communicates with its command and control handlers, and infects a machine.
B. penetrates the organization, infects a machine, and communicates with its command and control handlers.
C. communicates with its command and control handlers, infects a machine, and penetrates the organization.
D. infects a machine, communicates with its command and control handlers, and penetrates the organization.
正解：B