CCSE 156-315.81.20完全版問題集には無料PDF問題で合格させる [Q288-Q306]

CCSE 156-315.81.20完全版問題集には無料PDF問題で合格させる

100%更新されたのはCheckPoint 156-315.81.20限定版PDF問題集

質問 # 288
You are working with multiple Security Gateways enforcing an extensive number of rules.
To simplify security administration, which action would you choose?

A. Create a separate Security Policy package for each remote Security Gateway.
B. Eliminate all possible contradictory rules such as the Stealth or Cleanup rules.
C. Create network objects that restricts all applicable rules to only certain networks.
D. Run separate SmartConsole instances to login and configure each Security Gateway directly.

正解：A

質問 # 289
You notice that your firewall is under a DDoS attack and would like to enable the Penalty Box feature, which command you use?

A. sim erdos - m 1
B. sim erdos -e 1
C. sim erdos -x 1
D. sim erdos -v 1

正解：B

質問 # 290
What is the benefit of "tw monitor" over "tcpdump"?

A. "fw monitor" can be used from the CLI of the Management Server to collect information from multiple gateways.
B. With "fw monitor", you can see the inspection points, which cannot be seen in "tcpdump"
C. "fw monitor" reveals Layer 2 information, while "tcpdump" acts at Layer 3.
D. "fw monitor" is also available for 64-Bit operating systems.

正解：B

質問 # 291
SandBlast has several functional components that work together to ensure that attacks are prevented in real-time.
Which the following is NOT part of the SandBlast component?

A. Threat Emulation
B. Mail Transfer Agent
C. Mobile Access
D. Threat Cloud

正解：C

質問 # 292
What are the available options for downloading Check Point hotfixes in Gala WebUI (CPUSE)?

A. Manually, Scheduled, Automatic
B. Manually, Scheduled, Enabled
C. Manually, Automatic, Disabled
D. Manually, Scheduled, Disabled

正解：A

質問 # 293
The "Hit count" feature allows tracking the number of connections that each rule matches.
Will the Hit count feature work independently from logging and Track the hits if the Track option is set to "None"?

A. Yes it will work independently as long as "analyze all rules" tick box is enabled on the Security Gateway.
B. No, it will work independently. Hit Count will be shown only for rules Track option set as Log or alert.
C. Yes it will work independently because when you enable Hit Count, the SMS collects the data from supported Security Gateways.
D. No, it will not work independently because hit count requires all rules to be logged.

正解：C

質問 # 294
Is it possible to establish a VPN before the user login to the Endpoint Client?

A. no, the user must login first.
B. yes, you had to enable Machine Authentication in the Gateway object of the Smart Console
C. yes. you had to set neo_always_connected to true in the trac.defaults of the Remote Access Client or you can use the endpoint_vpn_always_connected attribute in the trac_client_1 .ttm file located in the SFWDIR/conf directory on the Security Gateway
D. yes, you had to set neo_remember_user_password to true in the trac.defaults of the Remote Access Client or you can use the endpoint_vpn_remember_user_password attribute in the trac_client_1 .ttm file located in the SFWDIR/conf directory on the Security Gateway

正解：B

質問 # 295
In order for changes made to policy to be enforced by a Security Gateway, what action must an administrator perform?

A. Install policy
B. Install database
C. Publish changes
D. Save changes

正解：A

質問 # 296
You need to change the MAC-address on eth2 interface of the gateway.
What is the correct way to change MAC-address in Check Point Gaia?

A. In CLISH run set interface eth2 hw-addr 11 11 11:11:11 11
B. In expert-mode run ifconfig eth1 hw 11:11:11:11 11 11
C. In CLISH run: set interface eth2 mac-addr 11:11:11:11:11:11
D. In expert-mode run: ethtool -4 eth2 mac 11 11:11:11:11:11

正解：C

質問 # 297
From SecureXL perspective, what are the three paths of traffic flow:

A. Layer Path; Blade Path; Rule Path
B. Initial Path; Medium Path; Accelerated Path
C. Firewall Path; Accept Path; Drop Path
D. Firewall Path; Accelerated Path; Medium Path

正解：D

質問 # 298
Identify the API that is not supported by Check Point currently.

A. OPSEC SDK
B. R81 Management API-
C. Open REST API
D. Identity Awareness Web Services API

正解：C

質問 # 299
What is the mechanism behind Threat Extraction?

A. Any active contents of a document, such as JavaScripts, macros and links will be removed from the document and forwarded to the intended recipient, which makes this solution very fast.
B. This is a new mechanism to identify the IP address of the sender of malicious codes and put it into the SAM database (Suspicious Activity Monitoring).
C. This is a new mechanism which is able to collect malicious files out of any kind of file types to destroy it prior to sending it to the intended recipient.
D. This a new mechanism which extracts malicious files from a document to use it as a counter-attack against its sender.

正解：A

質問 # 300
How long may verification of one file take for Sandblast Threat Emulation?

A. up to 1 minutes
B. up to 3 minutes
C. within seconds cleaned file will be provided
D. up to 5 minutes

正解：B

質問 # 301
What is the purpose of extended master key extension/session hash?

A. Supplement DLP data watermark
B. Special TCP handshaking extension
C. In case of TLS1.x it is a prevention of a Man-in-the-Middle attack/disclosure of the client-server communication
D. UDP VOIP protocol extension

正解：C

質問 # 302
What are the blades of Threat Prevention?

A. DLP, AntiVirus, QoS, AntiBot, Sandblast Threat Emulation/Extraction
B. IPS, DLP, AntiVirus, AntiBot, Sandblast Threat Emulation/Extraction
C. IPS, AntiVirus, AntiBot, Sandblast Threat Emulation/Extraction
D. IPS, AntiVirus, AntiBot

正解：C

質問 # 303
Which of the completed statements is NOT true? The WebUI can be used to manage user accounts and:

A. add users to your Gaia system.
B. assign user rights to their home directory in the Security Management Server.
C. assign privileges to users.
D. edit the home directory of the user.

正解：B

質問 # 304
To enable Dynamic Dispatch on Security Gateway without the Firewall Priority Queues, run the following command in Expert mode and reboot: