最新的CCSM認證 156-115.77考試題庫

問題1

The fw tab -t ___________ command displays the NAT table.

A. conns

B. tablist

C. loglist

D. fwx_alloc

正確答案: D

問題2

How can you see a dropped connection and the cause from the kernel?

A. fw ctl debug drop on

B. fw zdebug drop

C. fw debug drop on

D. fw ctl zdebug drop

正確答案: D

問題3

ACME Corp has a cluster consisting of two 13500 appliances. As the Firewall Administrator, you notice that on an output of top, you are seeing high CPU usage of the cores assigned as SNDs, but low CPU usage on cores assigned to individual fw_worker_X processes. What command should you run next to performance tune your cluster?

A. fwaccel off - this will turn off SecureXL, which is causing your SNDs to be running high in the first place.

B. fwaccel stats -s - this will show you the acceleration profile of your connections and potentially why your SNDs are running high while other cores are running low.

C. fw ctl debug -m cluster + all - this will show you all the connections being processed by ClusterXL and explain the high CPU usage on your appliance.

D. fw tab -t connections -s - this will show you a summary of your connections table, and allow you to determine whether there is too much traffic traversing your firewall.

正確答案: B

說明：（僅 VCESoft 成員可見）

問題4

You are configuring dynamic routing on Secure Platform, as the administrator you run the command pro enable and reboot. You are confident that your configuration has been done correctly. When you check, you find the dynamic routing daemon has not started. What is the likely cause of this issue?

A. You need to apply the license and push the policy.

B. Secure Platform does not support dynamic routing.

C. Dynamic routing needs to be enabled in cpconfig.

D. You must push the policy after your reboot.

正確答案: A

問題5

Where do you configure VTIs on your R77 gateway in VSX mode?

A. VTIs are not supported in VSX mode.

B. VTIs are configured in SmartDashboard.

C. VTIs are configured in VS0 context.

D. VTIs are configured in each VS context.

正確答案: A

說明：（僅 VCESoft 成員可見）

問題6

What causes the SIP Early NAT chain module to appear in the chain?

A. The default SIP service is used in the Rule Base.

B. SIP is configured in IPS.

C. A VOIP domain is configured.

D. The SIP traffic is trying to pass through the firewall.

正確答案: A

問題7

When the IPS 'Bypass under Load' mechanism detects that the certain CPU and memory usage thresholds have been reached, which of the following occurs?

A. IPS is disabled completely

B. The mechanism disables all IPS protections by placing them under 'exception'

C. The mechanism configures all IPS protections in 'Detect Mode'

D. Stateful Inspection is disabled

正確答案: B

問題8

The command fw monitor -p all displays what type of information?

A. It captures all points of the chain as the packet goes through the firewall kernel.

B. It does a firewall monitor capture on all interfaces.

C. This is not a valid command.

D. The -p is used to resolve MAC address in the firewall capture.

正確答案: A

問題9

What command can be used to get the following output?

A. fw ctl kdebug

B. fwaccel conns

C. fw monitor -e "accept;"

D. netstat -ni

正確答案: B

問題10

Which of the following IPS Layers is responsible for ensuring that only valid retransmission packets are allowed to proceed to destinations?

A. Context Management Interface layer (CMI)

B. Protocol Parsers

C. Passive Streaming Library (PSL)

D. Protections

正確答案: C

問題11

What considerations are required when configuring IPV6 with Wire mode?

A. IPv6 in Wire mode is only supported in R77.

B. IPV6 is not supported in Wire mode.

C. You must use internal IPv6 addressing space to use Wire mode.

D. IPV6 must be configured on both end points.

正確答案: B

問題12

What is the difference between "connection establishment acceleration" (templating) and "traffic acceleration"?

A. "Traffic acceleration" only accelerates a single connection, while "connection establishment acceleration" accelerates similar traffic.

B. "Connection establishment acceleration" only accelerates a single connection, while "traffic acceleration" accelerates similar traffic.

C. These are the same technologies with different names.

D. "Traffic acceleration" is accelerated through hardware, and "connection establishment acceleration" is accelerated in software.

正確答案: A

問題13

Misha is working on a stand-by firewall and deletes the connections table in error. He finds that now the table is out of sync with the Active member. to get them completely synced again, Mish should run the command pair ____________ and __________ .

A. fw ctl setsync off, fw ctl setsync on

B. fw ctl setsync off, fw ctl setsync start

C. fw ctl sync stop, fw ctl sync start

D. fw ctl setsync stop, fw ctl setsync on

正確答案: B

問題14

What is the limit to the number of VPN directions that can be configured in a single rule?

A. After configuring ten you must use a standard bi-directional condition.

B. You may only configure one direction per rule.

C. It is limited to the number of communities that exist in your dashboard.

D. There is no limit.

正確答案: D

最新的CheckPoint Check Point Certified Security Master - 156-115.77免費考試真題

最新更新

站內鏈接

聯系我們