CheckPoint 156-915.80 問題集

質問 1：
SmartEvent provides a convenient way to run common command line executables that can assist in investigating events. Right-clicking the IP address, source or destination, in a event provides a list of default and customized commands. They appear only on cells that refer to IP addresses because the IP address of the active cell is used as the destination of the command when run. The default commands are:
A. ping, traceroute, netstat, and route
B. ping, traceroute, netstat, and nslookup
C. ping, whois, nslookup, and Telnet
D. ping, nslookup, Telnet, and route
正解：C

質問 2：
You have three servers located in a DMZ, using private IP addresses. You want internal users from 10.10.10.x to access the DMZ servers by public IP addresses. Internal_net 10.10.10.x is configured for Hide NAT behind the Security Gateway's external interface.

What is the best configuration for 10.10.10.x users to access the DMZ servers, using the DMZ servers' public IP addresses?
A. When connecting to internal network 10.10.10.x, configure Hide NAT for the DMZ network behind the Security Gateway DMZ interface.
B. When the source is the internal network 10.10.10.x, configure manual static NAT rules to translate the DMZ servers.
C. When trying to access DMZ servers, configure Hide NAT for 10.10.10.x behind the DMZ's interface.
D. When connecting to the Internet, configure manual Static NAT rules to translate the DMZ servers.
正解：B

質問 3：
If an administrator wants to add manual NAT for addresses not owned by the Check Point firewall, what else is necessary to be completed for it to function properly?
A. Add the proxy ARP configuration in a file called $FWDIR/conf/local.arp
B. Add the proxy ARP configuration in a file called /etc/conf/local.arp
C. Add the proxy ARP configurations in a file called $CPDIR/config/local.arp
D. Nothing - the proxy ARP is automatically handled in the R80 version
正解：A

質問 4：
When synchronizing clusters, which of the following statements is FALSE?
A. The state of connections using resources is maintained in a Security Server, so their connections cannot be synchronized.
B. In the case of a failover, accounting information on the failed member may be lost despite a properly working synchronization.
C. Client Authentication or Session Authentication connections through a cluster member will be lost if the cluster member fails.
D. Only cluster members running on the same OS platform can be synchronized.
正解：C

質問 5：
A ClusterXL configuration is limited to ___ members.
A. 2
B. 16
C. There is no limit.
D. 6
正解：D

質問 6：
What is the mechanism behind Threat Extraction?
A. This is a new mechanism which extracts malicious files from a document to use it as a counter-attack against its sender
B. Any active contents of a document, such as JavaScripts, macros and links will be removed from the document and forwarded to the intended recipient, which makes this solution very fast.
C. This is a new mechanism to identify the IP address of the sender of malicious codes and to put it into the SAM database (Suspicious Activity Monitoring).
D. This is a new mechanism which is able to collect malicious files out of any kind of file types to destroy it prior to sending it to the intended recipient
正解：B

質問 7：
Where can you find the Check Point's SNMP MIB file?
A. There is no specific MIB file for Check Point products.
B. $FWDIR/conf/snmp.mib
C. $CPDIR/lib/snmp/chkpt.mib
D. It is obtained only by request from the TAC.
正解：C