合格させちゃうCheck Point Certified Security Expert 156-315.81試験簡単かつ正確なPDF問題 [2023年07月05日]
156-315.81認証試験問題集解答を提供しています
質問 # 108
Check Pont Central Deployment Tool (CDT) communicates with the Security Gateway / Cluster Members over Check Point SIC _______ .
- A. TCP Port 19009
- B. TCP Port 18191
- C. TCP Port 18209
- D. TCP Port 18190
正解：B
質問 # 109
Which command is used to add users to or from existing roles?
- A. Add rba user <User Name> roles <List>
- B. Add user <User Name>
- C. Add user <User Name> roles <List>
- D. Add rba user <User Name>
正解：A
質問 # 110
What does it mean if Deyra sees the gateway status? (Choose the BEST answer.)
- A. There is a blade reporting a problem.
- B. Security Gateway's MGNT NIC card is disconnected.
- C. SmartCenter Server cannot reach this Security Gateway.
- D. VPN software blade is reporting a malfunction.
正解：A
質問 # 111
Fill in the blank: Browser-based Authentication sends users to a web page to acquire identities using ________ .
- A. Captive Portal and Transparent Kerberos Authentication
- B. UserCheck
- C. Captive Portal
- D. User Directory
正解：A
質問 # 112
Which of the following is NOT supported by CPUSE?
- A. Automatic download of hotfixes
- B. Automatic download of full installation and upgrade packages
- C. Offline installations
- D. Installation of private hotfixes
正解：C
解説：
https://sc1.checkpoint.com/documents/R77/CP_R77_Gaia_AdminWebAdminGuide/ html_frameset.htm?topic=documents/R77/CP_R77_Gaia_AdminWebAdminGuide/112109
質問 # 113
You want to gather data and analyze threats to your mobile device. It has to be a lightweight app. Which application would you use?
- A. Check Point Capsule Cloud
- B. SmartEvent Client Info
- C. SecuRemote
- D. Sandblast Mobile Protect
正解：D
解説：
SandBlast Mobile Protect is a lightweight app for iOS and Android that gathers data and helps analyze threats to devices in your environment.
https://www.checkpoint.com/downloads/products/how-sandblast-mobile-works-solution-brief.pdf
質問 # 114
What scenario indicates that SecureXL is enabled?
- A. SecureXL can be disabled in cpconfig
- B. Dynamic objects are available in the Object Explorer
- C. fwaccel commands can be used in clish
- D. Only one packet in a stream is seen in a fw monitor packet capture
正解：C
質問 # 115
You notice that your firewall is under a DDoS attack and would like to enable the Penalty Box feature, which command you use?
- A. sim erdos -e 1
- B. sim erdos -v 1
- C. sim erdos - m 1
- D. sim erdos -x 1
正解：A
質問 # 116
To optimize Rule Base efficiency, the most hit rules should be where?
- A. Towards the middle of the Rule Base.
- B. Towards the top of the Rule Base.
- C. Removed from the Rule Base.
- D. Towards the bottom of the Rule Base.
正解：B
質問 # 117
Which process is used mainly for backward compatibility of gateways in R81.X? It provides communication with GUI-client, database manipulation, policy compilation and Management HA synchronization.
- A. cpd
- B. fwm
- C. cpm
- D. fwd
正解：B
解説：
D18912E1457D5D1DDCBD40AB3BF70D5D
質問 # 118
What is UserCheck?
- A. Administrator tool used to monitor users on their network.
- B. Messaging tool used to verify a user's credentials.
- C. Communication tool used to notify an administrator when a new user is created.
- D. Communication tool used to inform a user about a website or application they are trying to access.
正解：D
質問 # 119
What is the minimum number of CPU cores required to enable CoreXL?
- A. 0
- B. 1
- C. 2
- D. 3
正解：D
解説：
Default number of CoreXL IPv4 FW instances:
Note: The real number of CoreXL FW instances depends on the current CoreXL license.
Number of
CPU cores Default number of
CoreXL IPv4
FW instances Default number of
Secure Network Distributors
(SNDs)
1 1
Note: CoreXL is disabled 0
Note: CoreXL is disabled
2 2 2
4 3 1
6 - 20 [Number of CPU cores] - 2 2
More than 20 (1) [Number of CPU cores] - 4 4
質問 # 120
Which is the least ideal Synchronization Status for Security Management Server High Availability deployment?
- A. Collision
- B. Lagging
- C. Synchronized
- D. Never been synchronized
正解：A
質問 # 121
What is the order of NAT priorities?
- A. IP pool NAT, static NAT, hide NAT
- B. Static NAT, hide NAT, IP pool NAT
- C. Static NAT, IP pool NAT, hide NAT
- D. Static NAT, automatic NAT, hide NAT
正解：C
質問 # 122
Which of the following Central Deployment is NOT a limitation in R81.10 SmartConsole?
- A. Security Gateway Clusters in Load Sharing mode
- B. Dedicated Log Server
- C. Security Gateways/Clusters in ClusterXL HA new mode
- D. Dedicated SmartEvent Server
正解：A
質問 # 123
When using CPSTAT, what is the default port used by the AMON server?
- A. 0
- B. 1
- C. 2
- D. 3
正解：A
質問 # 124
What is required for a certificate-based VPN tunnel between two gateways with separate management systems?
- A. Shared Secret Passwords
- B. Shared User Certificates
- C. Mutually Trusted Certificate Authorities
- D. Unique Passwords
正解：C
質問 # 125
Which two Identity Awareness daemons are used to support identity sharing?
- A. Policy Decision Point (PDP) and Policy Enforcement Point (PEP)
- B. Policy Enforcement Point (PEP) and Policy Manipulation Point (PMP)
- C. Policy Activation Point (PAP) and Policy Decision Point (PDP)
- D. Policy Manipulation Point (PMP) and Policy Activation Point (PAP)
正解：A
解説：
Source: https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_IdentityAwareness_AdminGuide/Topics-IDAG/Identity-Awareness-Config-Identity-Sharing.htm
質問 # 126
......
検証済みで更新された156-315.81問題集と解答で100%一発合格保証の問題集：https://drive.google.com/open?id=1efeh6djs9Hqvah4Bc3jOScY6N_O9XGqY
更新された156-315.81試験練習テスト問題：https://jp.fast2test.com/156-315.81-premium-file.html