質問 1:Regarding QoS guarantees and limits, which of the following statements is FALSE?
A. If both a rule and per-connection limit are defined for a rule, the per-connection limit must not be greater than the rule limit.
B. If both a limit and guarantee per rule are defined in a QoS rule, the limit must be smaller than the guarantee.
C. If a guarantee is defined in a sub-rule, a gurarantee must be defined for the rule above it.
D. A rule guarantee must not be less than the sum defiined in the guarantees' sub-rules.
E. The guarantee of a sub-rule cannot be greater than the guarantee defined for the rule above it.
正解:B
質問 2:Your organization's security infrastructure separates Security Gateways geographically.
You must request a central license for one remote Security Gateway. How would you request and apply the license? Request a central license:
A. using the remote Gateway's IP address. Attach the license to the remote Gateway via SmartUpdate.
B. using your SmartCenter Server's IP address. Attach the license to the remote Gateway via SmartUpdate.
C. for the Gateways' IP address. Apply the license on the SmartCenter Server with the cprlic put command.
D. using the remote Gateway's IP address. Apply the license locally with the cplic put command.
E. using the SmartCenter Server's IP address. Apply the license locally on the remote Gateway with the cplic put command.
正解:B
質問 3:Jack's project is to define the backup and restore section of his organization's disaster recovery plan for his organization??s distributed NGX installation. Jack must meet the following required and desired objectives:
Required Objective: The security policy repository must be backed up no less frequently than every 24 hours.
Desired Objective: The NGX components that enforce the Security Policies should be backed up no less frequently than once a week.
Desired Objective: Back up NGX logs no less frequently than once a week.
Jack's disaster recovery plan is as follows:
1.*Use the cron utility to run the upgrade_export command each night on the SmartCenter Servers. Configure the organization's routine backup software to back up the files created by the upgrade_export command.
2.*Configure the SecurePlanform backup utility to back up the Security Gateways every Saturday night.
3.*Use the cron utility to run the upgrade_export comand each Saturday night on the Log Servers. Configure an automatic, nightly logswitch. Configure the organization's routine backup software to back up the switched logs every night.
Jack's plan:
A. Meets the required objective but does not meet either desired objective.
B. Does not meet the required objective.
C. Meets the required objective and only one desired objective.
D. Meets the required objective and both desired objectives.
正解:D
質問 4:When you use the Global Properties' default settings, which type of traffic will be dropped, if no explicit rule allows the traffic?
A. IKE and RDP traffic
B. Firewall logging and ICA key-exchange information.
C. Outgoing traffic origination from the Security Gateway.
D. SmartUpdate connection
E. RIP traffic
正解:E
質問 5:Review the following rules and note the Client Authentication Action properties screen, as shown in the exhibit:
After being authenticated by the Security Gateway, when a user starts an HTTP connection to a Web site, the user tries to FTP to another site using the command line. What happens to the user? The:
A. FTP data connection is dropped, after the user is authenticated successfully.
B. FTP session is dropped by the implicit Cleanup Rule.
C. User is prompted for authentication by the Security Gateway again.
D. FTP connection is dropped by rule 2.
E. user is prompted from that FTP site only, and does not need to enter username and password for Client Authentication.
正解:E
質問 6:Larry is the Security Administrator for a software-development company. To isolate the corportate network from the developers' network, Larry installs an internal Security Gateway. Larry wants to optimize the performance of this Gateway. Which of the following actions is most likely to improve the Gateway's performance?
A. Remove unused Security Policies from Policy Packages.
B. Use domain objects in rules, where possible.
C. Put the least-used rules at the top of the Rule Base.
D. Clear all Global Properties check boxes, and use explicit rules.
E. Use groups within groups in the manual NAT Rule Base.
正解:A
質問 7:By default, a standby SmartCenter Server is automatically synchronized by an active SmartCenter Server, when:
A. The Security Policy is installed.
B. The Security Administrator logs in to the standby SmartCenter Server, for the first time.
C. The Security Policy is saved.
D. The standby SmartCenter Server starts for the first time.
E. The user database is installed.
正解:A
弊社のCheckPoint 156-915を利用すれば試験に合格できます
弊社のCheckPoint 156-915は専門家たちが長年の経験を通して最新のシラバスに従って研究し出した勉強資料です。弊社は156-915問題集の質問と答えが間違いないのを保証いたします。
この問題集は過去のデータから分析して作成されて、カバー率が高くて、受験者としてのあなたを助けて時間とお金を節約して試験に合格する通過率を高めます。我々の問題集は的中率が高くて、100%の合格率を保証します。我々の高質量のCheckPoint 156-915を利用すれば、君は一回で試験に合格できます。
弊社は無料CheckPoint 156-915サンプルを提供します
お客様は問題集を購入する時、問題集の質量を心配するかもしれませんが、我々はこのことを解決するために、お客様に無料156-915サンプルを提供いたします。そうすると、お客様は購入する前にサンプルをダウンロードしてやってみることができます。君はこの156-915問題集は自分に適するかどうか判断して購入を決めることができます。
156-915試験ツール:あなたの訓練に便利をもたらすために、あなたは自分のペースによって複数のパソコンで設置できます。
安全的な支払方式を利用しています
Credit Cardは今まで全世界の一番安全の支払方式です。少数の手続きの費用かかる必要がありますとはいえ、保障があります。お客様の利益を保障するために、弊社の156-915問題集は全部Credit Cardで支払われることができます。
領収書について:社名入りの領収書が必要な場合、メールで社名に記入していただき送信してください。弊社はPDF版の領収書を提供いたします。
一年間の無料更新サービスを提供します
君が弊社のCheckPoint 156-915をご購入になってから、我々の承諾する一年間の更新サービスが無料で得られています。弊社の専門家たちは毎日更新状態を検査していますから、この一年間、更新されたら、弊社は更新されたCheckPoint 156-915をお客様のメールアドレスにお送りいたします。だから、お客様はいつもタイムリーに更新の通知を受けることができます。我々は購入した一年間でお客様がずっと最新版のCheckPoint 156-915を持っていることを保証します。
TopExamは君に156-915の問題集を提供して、あなたの試験への復習にヘルプを提供して、君に難しい専門知識を楽に勉強させます。TopExamは君の試験への合格を期待しています。
弊社は失敗したら全額で返金することを承諾します
我々は弊社の156-915問題集に自信を持っていますから、試験に失敗したら返金する承諾をします。我々のCheckPoint 156-915を利用して君は試験に合格できると信じています。もし試験に失敗したら、我々は君の支払ったお金を君に全額で返して、君の試験の失敗する経済損失を減少します。
CheckPoint Accelerated CCSE NGX (156-915.1) 認定 156-915 試験問題:
1. Doug wants to know who installed a Security Policy blocking all traffic from the corporate network. Which SmartView Tracker selection is best suited for this?
A) Audit tab
B) custom filter
C) Active tab
D) Records pane
E) log connections
2. One of your remote Security Gateways suddenly stops sending logs, and you cannot install the Security Policy on the Gateway. All other remote Security Gateways are logging normally to the SmartCenter Server, and Policy installation is not affected. When you click the Test SIC status button in the problematic gateway object, you receive error message
"unknown". What is the problem?
A) The remote Gateway's IP address has changed, which invalidates the SIC Certificate.
B) The Security Gateway is NG with Application Intelligence, and the SmartCenter Server is NGX.
C) The Internal Certificate Authority for the SmartCenter object has been removed from objects_5_0.C.
D) The time on the SmartCenter Server's clock has changed, which invalidates the remote Gateway's Certificate.
E) There is no connection between the SmartCenter Server and the remote Gateway.
Rules or routing may block the connection.
3. You configure a Check Point QoS Rule Base with two rules: an HTTP rule with a weight of
40, and the Default Rue with a weight of 10. If the only traffic passing through your QoS Module is HTTP traffic, which percent of bandwidth will be allocated to the HTTP traffic?
A) 40%
B) 50%
C) 100%
D) 10%
E) 80%
4. Your company has two headquarters, one in London, one in NewYork. Each headquarters includes several branch offices. The branch offices ONLY need to communicate with the headquarters in their country, not with each other, and only the headquarters need to communicate directly. Which configuration meets the criteria?
VPN Communities comprised of:
A) three mesh Communities: one for London headquarters and its branches, one for New York headquarters and its branches, and one for London and New York headquarters.
B) two mesh Communities for each headquarters and their branch offices; and one star Community, in which London is the center of the Community and New York is the satellite.
C) three star Communities: first between New York headquarters and its branches, the second between London headquarters and its branches, the third between New York and London headquarters.
D) two mesh and one star Community; each mesh Community is set up for each site, with mesh Communities between their branches. The star Community has New York as the headquarters and London as its satellite.
5. Jane needs to back up the routing, interface, and DNS configuration information from her NGX SecurePlatform Pro Security Gateway. Which backup-and-restore solution do you recommend for Jane?
A) SecurePlatform backup utilities
B) Policy Package management
C) upgrade_export and upgrade_import commands
D) Database Revision Control
E) Manual copies of the $FWDIR/ conf directory
質問と回答:
質問 # 1 正解: A | 質問 # 2 正解: E | 質問 # 3 正解: C | 質問 # 4 正解: C | 質問 # 5 正解: A |