2025年最新の認定サンプル問題156-215.81.20問題集と練習試験合格させます
156-215.81.20豪華セット学習ガイドにはオンライン試験エンジン
質問 # 193
When using Monitored circuit VRRP, what is a priority delta?
- A. When an interface fails the delta claims the priority
- B. When an interface fails the priority delta decides if the other interfaces takes over
- C. When an interface fails the priority changes to the priority delta
- D. When an interface fails the priority delta is subtracted from the priority
正解：D
質問 # 194
Which of the following is NOT a valid application navigation tab in the R80 SmartConsole?
- A. Manage and Command Line
- B. Gateway and Servers
- C. Security Policies
- D. Logs and Monitor
正解：A
質問 # 195
What are the three deployment considerations for a secure network?
- A. Bridge Mode, Remote, and Standalone
- B. Distributed, Bridge Mode, and Remote
- C. Remote, Standalone, and Distributed
- D. Standalone, Distributed, and Bridge Mode
正解：C
質問 # 196
Which of the following log queries would show only dropped packets with source address of 192.168.1.1 and destination address of 172.26.1.1?
- A. 192.168.1.1 AND 172.26.1.1 AND drop
- B. 192.168.1.1 OR 172.26.1.1 AND action:Drop
- C. src:192.168.1.1 AND dst:172.26.1.1 AND action:Drop
- D. src:192.168.1.1 OR dst:172.26.1.1 AND action:Drop
正解：C
質問 # 197
When dealing with rule base layers, what two layer types can be utilized?
- A. Inbound Layers and Outbound Layers
- B. Structured Layers and Overlap Layers
- C. R81.10 does not support Layers
- D. Ordered Layers and Inline Layers
正解：D
質問 # 198
Which tool is used to enable ClusterXL?
- A. sysconfig
- B. SmartUpdate
- C. cpconfig
- D. SmartConsole
正解：C
質問 # 199
Both major kinds of NAT support Hide and Static NAT. However, one offers more flexibility.
Which statement is true?
- A. Automatic NAT can offer more flexibility than Manual NAT.
- B. Manual NAT can offer more flexibility than Automatic NAT.
- C. Dynamic NAT with Port Address Translation can offer more flexibility than Network Address Translation (NAT) Overloading.
- D. Dynamic Network Address Translation (NAT) Overloading can offer more flexibility than Port Address Translation.
正解：B
質問 # 200
Which one of the following is a way that the objects can be manipulated using the new API integration in R80 Management?
- A. RC4 Encryption
- B. JSON
- C. Microsoft Publisher
- D. Microsoft Word
正解：B
質問 # 201
True or False: In a Distributed Environment, a Central License can be installed via CLI on a Security Gateway
- A. True, CLI is the prefer method for Licensing
- B. False, Central License are installed via Gaia on Security Gateways
- C. False, Central License are handled via Security Management Server
- D. True, Central License can be installed with CPLIC command on a Security Gateway
正解：D
質問 # 202
Fill in the blank: The_____is used to obtain identification and security information about network users.
- A. User Directory
- B. User server
- C. User index
- D. UserCheck
正解：A
質問 # 203
In the Check Point three-tiered architecture, which of the following is NOT a function of the Security Management Server?
- A. Verify and compile Security Policies.
- B. Store firewall logs to hard drive storage.
- C. Display policies and logs on the administrator's workstation.
- D. Processing and sending alerts such as SNMP traps and email notifications.
正解：C
質問 # 204
What data MUST be supplied to the SmartConsole System Restore window to restore a backup?
- A. Server, Username, Password, Path, Version
- B. Server, Protocol, Username, Password, Path
- C. Username, Password, Path, Version
- D. Server, Protocol, Username, Password, Destination Path
正解：B
質問 # 205
Rugged appliances are small appliances with ruggedized hardware and like Quantum Spark appliance they use which operating system?
- A. Gaia
- B. Gaia embedded
- C. Centos Linux
- D. Red Hat Enterprise Linux version 5
正解：B
質問 # 206
Customer's R80 management server needs to be upgraded to R80.10.
What is the best upgrade method when the management server is not connected to the Internet?
- A. CPUSE offline upgrade
- B. SmartUpdate upgrade
- C. CPUSE online upgrade
- D. Export R80 configuration, clean install R80.10 and import the configuration
正解：A
質問 # 207
What command would show the API server status?
- A. api restart
- B. show api status
- C. cpm status
- D. api status
正解：B
質問 # 208
The "Hit count" feature allows tracking the number of connections that each rule matches.
Will the Hit count feature work independently from logging and Track the hits even if the Track option is set to "None"?
- A. Yes, it will work independently because when you enable Hit Count, the SMS collects the data from supported Security Gateways
- B. Yes, it will work independently as long as "analyze all rules" tick box is enabled on the Security Gateway
- C. No, it will not work independently because hit count requires all rules to be logged
- D. No, it will not work independently. Hit Count will be shown only for rules with Track options set as Log or alert
正解：A
質問 # 209
Which of the following is NOT a policy type available for each policy package?
- A. Access Control
- B. Threat Prevention
- C. Desktop Security
- D. Threat Emulation
正解：D
質問 # 210
What is true about the IPS-Blade?
- A. in R80, IPS is managed by the Threat Prevention Policy
- B. in R80, IPS Exceptions cannot be attached to "all rules"
- C. in R80, in the IPS Layer, the only three possible actions are Basic, Optimized and Strict
- D. in R80, the GeoPolicy Exceptions and the Threat Prevention Exceptions are the same
正解：A
質問 # 211
A network administrator has informed you that they have identified a malicious host on the network, and instructed you to block it. Corporate policy dictates that firewall policy changes cannot be made at this time.
What tool can you use to block this traffic?
- A. Suspicious Activity Monitoring (SAM) rules
- B. Anti-Bot protection
- C. Policy-based routing
- D. Anti-Malware protection
正解：A
質問 # 212
After a new Log Server is added to the environment and the SIC trust has been established with the SMS what will the gateways do?
- A. The gateways can only send logs to an SMS and cannot send logs to a Log Server. Log Servers are proprietary log archive servers.
- B. Gateways will send new firewall logs to the new Log Server as soon as the SIC trust is set up between the SMS and the new Log Server.
- C. The firewalls will detect the new Log Server after the next policy install and redirect the new logs to the new Log Server.
- D. Logs are not automatically forwarded to a new Log Server. SmartConsole must be used to manually configure each gateway to send its logs to the server.
正解：D
質問 # 213
When URL Filtering is set, what identifying data gets sent to the Check Point Online Web Service?
- A. The host part of the URL is sent to the Check Point Online Web Service
- B. The full URL, including page data, is sent to the Check Point Online Web Service
- C. The URL and IP address are sent to the Check Point Online Web Service
- D. The URL and server certificate are sent to the Check Point Online Web Service
正解：A
質問 # 214
Which of the following is NOT a method used by Identity Awareness for acquiring identity?
- A. Cloud IdP (Identity Provider)
- B. Active Directory Query
- C. RADIUS
- D. Remote Access
正解：A
質問 # 215
Which of the following are types of VPN communities?
- A. Meshed, star, and combination
- B. Pentagon, star, and combination
- C. Star, octagon, and combination
- D. Combined and star
正解：A
質問 # 216
Which of the following is NOT a role of the SmartCenter:
- A. Policy configuration
- B. Certificate authority
- C. Status monitoring
- D. Address translation
正解：D
質問 # 217
......
156-215.81.20問題集レビュー専門クイズで学習材料：https://jp.fast2test.com/156-215.81.20-premium-file.html