最新的CCSA認證 156-215.13考試題庫

問題1

What is the default setting when you use NAT?

A. Destination Translated on Client side

B. Source Translated on both sides

C. Destination Translated on Server side

D. Source Translated on Client side

正確答案: A

問題2

Which of the following is an authentication method used by Identity Awareness?

A. PKI

B. RSA

C. SSL

D. Captive Portal

正確答案: D

問題3

You are trying to save a custom log query in R76 SmartView Tracker, but getting the
following error:
Could not save <query-name> (Error: Database is Read Only)
Which of the following is a likely explanation for this?

A. You do not have OS write permissions on the local SmartView Tracker PC in order to save the custom query locally.

B. You have read-only rights to the Security Management Server database.

C. Another administrator is currently connected to the Security Management Server with read/write permissions which impacts your ability to save custom log queries to the Security Management Server.

D. You do not have the explicit right to save a custom query in your administrator permission profile under SmartConsole customization.

正確答案: B

問題4

What happens when you run the commanD. fw sam -J src [Source IP Address]?

A. Connections from the specified source are blocked without the need to change the Security Policy.

B. Connections to the specified target are blocked without the need to change the Security Policy.

C. Connections to and from the specified target are blocked with the need to change the Security Policy.

D. Connections to and from the specified target are blocked without the need to change the Security Policy.

正確答案: A

問題5

You have installed a R76 Security Gateway on GAiA. To manage the Gateway from the enterprise Security Management Server, you create a new Gateway object and Security Policy. When you install the new Policy from the Policy menu, the Gateway object does not appear in the Install Policy window as a target. What is the problem?

A. The Gateway object is not specified in the first policy rule column Install On.

B. No Masters file is created for the new Gateway.

C. The object was created with Node > Gateway.

D. The new Gateway's temporary license has expired.

正確答案: C

問題6

You are troubleshooting NAT entries in SmartView Tracker. Which column do you check to view the new source IP?

A. XlateDPort

B. XlateSrc

C. XlateSPort

D. XlateDst

正確答案: B

問題7

When attempting to connect with SecureClient Mobile you get the following error message:
The certificate provided is invalid. Please provide the username and password.
What is the probable cause of the error?

A. There is no connection to the server, and the client disconnected.

B. Your user configuration does not have an office mode IP address so the connection failed.

C. Your user credentials are invalid.

D. Your certificate is invalid.

正確答案: D

問題8

Which R76 GUI would you use to see the number of packets accepted since the last policy install?

A. SmartView Monitor

B. SmartView Tracker

C. SmartDashboard

D. SmartView Status

正確答案: A

問題9

Jennifer McHanry is CEO of ACME. She recently bought her own personal iPad. She wants use her iPad to access the internal Finance Web server. Because the iPad is not a member of the Active Directory domain, she cannot identify seamlessly with AD Query. However, she can enter her AD credentials in the Captive Portal and then get the same access as on her office computer. Her access to resources is based on rules in the R76 Firewall Rule Base.
To make this scenario work, the IT administrator must:
1) Enable Identity Awareness on a gateway and select Captive Portal as one of the Identity Sources.
2) In the Portal Settings window in the User Access section, make sure that Name and password login is selected.
3) Create a new rule in the Firewall Rule Base to let Jennifer McHanry access network destinations. Select accept as the Action.
Ms. McHanry tries to access the resource but is unable. What should she do?

A. Have the security administrator select the Action field of the Firewall Rule "Redirect HTTP connections to an authentication (captive) portal"

B. Have the security administrator reboot the firewall

C. Install the Identity Awareness agent on her iPad

D. Have the security administrator select Any for the Machines tab in the appropriate Access Role

正確答案: A

問題10

How can you configure an application to automatically launch on the Security Management Server when traffic is dropped or accepted by a rule in the Security Policy?

A. User-defined alert script

B. Custom scripts cannot be executed through alert scripts.

C. SNMP trap alert script

D. Pop-up alert script

正確答案: A

問題11

You find a suspicious FTP site trying to connect to one of your internal hosts. How do you block it in real time and verify it is successfully blocked? Highlight the suspicious connection in SmartView Tracker:

A. Active mode. Block it using Tools > Block Intruder menu. Observe in the Active mode that the suspicious connection does not appear again in this SmartView Tracker view.

B. Log mode. Block it using Tools > Block Intruder menu. Observe in the Log mode that the suspicious connection does not appear again in this SmartView Tracker view.

C. Log mode. Block it using Tools > Block Intruder menu. Observe in the Log mode that the suspicious connection is listed in this SmartView Tracker view as "dropped".

D. Active mode. Block it using Tools > Block Intruder menu. Observe in the Active mode that the suspicious connection is listed in this SmartView Tracker view as "dropped".

正確答案: A

問題12

Which of the following is NOT a valid option when configuring access for Captive Portal?

A. Through all interfaces

B. Through internal interfaces

C. According to the Firewall Policy

D. From the Internet

正確答案: D

最新的CheckPoint Check Point Certified Security Administrator - GAiA - 156-215.13免費考試真題

最新更新

站內鏈接

聯系我們