CheckPoint 156-115.77 問題集

質問 1：
Where would you go to adjust the number of Kernels in CoreXL?
A. Cpconfig
B. fw ctl conf
C. fw ctl multik stat
D. fw ctl affinity
正解：A

質問 2：
In your SecurePlatform configuration you need to set up a manual static NAT entry. After creating the proper NAT rule what step needs to be completed?
A. No further actions are required.
B. Edit or create the file discntd.if.
C. Edit the file netconf.conf.
D. Edit or create the file local.arp.
正解：D

質問 3：
What is the length of an IPv6 address?
A. 54 bits
B. 6 Bytes
C. 128 Bytes
D. 128 bits
正解：D

質問 4：
While troubleshooting a connectivity issue with an internal web server, you know that packets are getting to the upstream router, but when you run a tcpdump on the external interface of the gateway, the only traffic you observe is ARP requests coming from the upstream router. Does the problem lie on the Check Point Gateway?
A. No - This is a layer 2 connectivity issue and has nothing to do with the firewall.
B. Yes - This could be due to a misconfigured Static NAT in the firewall policy.
C. No - The firewall is not dropping the traffic, therefore the problem does not lie with the firewall.
D. Yes - This could be due to a misconfigured route on the firewall.
正解：B

質問 5：
Your customer has a well optimized Rule Base with most traffic accelerated by SecureXL. They are still seeing slow performance. They are using an 8 core machine. They see the following output from fw ctl affinity -l. What could be done to improve performance with this deployment?

Checkpoint 156-115.77 Exam
A. Upgrade to SAM hardware.
B. Increase the number of cores dedicated to logging.
C. Add more CPU resources to the hardware.
D. Increase the number of Secure Network Dispatchers as the accelerated traffic is not passed to a worker core.
正解：D

質問 6：
PXL is considered to be what type of acceleration?
A. PXL is not related to acceleration
B. Slow Path
C. Fast Path
D. Medium Path
正解：D

質問 7：
What is the function of the setting "no_hide_services_ports" in the tables.def files?
A. Allowing management traffic to be accepted in an applied rule ahead of the stealth rule.
B. Hiding the particular tables from being synchronized to the other cluster member.
C. Preventing the secondary member from hiding its presence by not forwarding any packets.
D. Preventing outbound traffic from being hidden behind the cluster IP address.
正解：D
解説: (Topexam メンバーにのみ表示されます)