CheckPoint 156-915 問題集

質問 1：
What type of packet does a VPN-1 SecureClient send to its Policy Server, to report its Secure Configuration Verification status?
A. ICMP Destination Unreachable
B. ICMP Port Unreachable
C. IKE Key Exchange
D. TCP keep alive
E. UDP keep alive
正解：E

質問 2：
How can you reset the password of the Security Administrator, which was created during initial installation of the SmartCenter Server on SecurePlatform?
A. Export the user database into an ASCII file with fwm dbexport. Open this file with an editor, and delete the "Password" portion of the file. Then log in to the account without password. You will be prompted to assign a new password.
B. Launch cpconfig and select "Administrators".
C. Launch cpconfig and delete the Administrator's account. Recreate the account with the same name.
D. Launch SmartDashboard, click the admin user account, and overwrite the existing Check Point Password.
E. Type cpm -a, and provide the existing administration account name. Reset the Security Administrator's password.
正解：C

質問 3：
How does ClusterXL Unicast mode handle new traffic?
A. All members receive all packets. The SmartCenter Server decides which member will process the packets. Other members simply drop the packets.
B. All cluster members process all packets, and members synchronize with each other.
C. The pivot machine receives and inspects all new packets, and synchronizes the connections with other members.
D. Only the pivot machine receives all packets. It runs an algorithm to determine which member should process the packets.
正解：D

質問 4：
Your company has two headquarters, one in London, one in NewYork. Each headquarters includes several branch offices. The branch offices ONLY need to communicate with the headquarters in their country, not with each other, and only the headquarters need to communicate directly. Which configuration meets the criteria?
VPN Communities comprised of:
A. three mesh Communities: one for London headquarters and its branches, one for New York headquarters and its branches, and one for London and New York headquarters.
B. two mesh Communities for each headquarters and their branch offices; and one star Community, in which London is the center of the Community and New York is the satellite.
C. three star Communities: first between New York headquarters and its branches, the second between London headquarters and its branches, the third between New York and London headquarters.
D. two mesh and one star Community; each mesh Community is set up for each site, with mesh Communities between their branches. The star Community has New York as the headquarters and London as its satellite.
正解：C

質問 5：
When you find a suspicious connection from a problematic host, you want to block everything from that whole network, not just the host. You want to block this for an hour, but you do not want to add any rules to the Rule Base. How do you achieve this?
A. Select "block intruder" from the Tools menu in the SmartView Tracker
B. Create a Suspicious Activity rule in SmartView Tracker.
C. Create an "FW SAM" rule in SmartView Monitor.
D. Create a Suspicious Activity Rule in SmartView.
正解：D

質問 6：
Jane needs to back up the routing, interface, and DNS configuration information from her NGX SecurePlatform Pro Security Gateway. Which backup-and-restore solution do you recommend for Jane?
A. SecurePlatform backup utilities
B. Policy Package management
C. upgrade_export and upgrade_import commands
D. Database Revision Control
E. Manual copies of the $FWDIR/ conf directory
正解：A

質問 7：
Which Check Point QoS feature is used to dynamically allocate relative portions of available bandwidth?
A. Guarantees
B. Differentiated Services
C. Low Latency Queueing
D. Limits
E. Weighted Fair Queueing
正解：E