CheckPoint 156-310 考試概覽:

認證廠商:	Check Point Software Technologies
考試名稱:	CCSE NG (Check Point 認證資安專家 NG)
考試代碼:	156-310
證照有效期限:	舊版認證 (NG 系列，已停辦或不再主動開放報考)
考試費用:	250 美元 (歷史參考價，可能有所變動或已停售)
支援語言:	English
實際考試題數:	90-100
考試形式:	情境導向試題, 選擇題
及格分數:	70% - 75%
相關認證:	CCSA NG CCSE
考試時間:	120 分鐘
推薦課程:	Check Point 官方 CCSE 訓練課程
考試報名:	Pearson VUE Check Point 認證考試 Check Point 認證與訓練入口網站
範例考題:	CheckPoint 156-310 範例考題
考試方式:	電腦化測驗，於授權考場應考 (歷史合作機構為 Pearson VUE)
必備條件:	建議具備：CCSE NG 同等知識水準，或擁有 Check Point CCSA 級別知識與 Check Point Firewall-1 / VPN-1 系統實作經驗
官方大綱網址:	https://www.checkpoint.com/services/education-certification/

CheckPoint 156-310 考試大綱主題:

章節	目標
主題 1: 資安政策管理	- 規則庫設計與政策部署 - SmartDashboard 與 SmartCenter 設定
主題 2: 網路位址轉換 (NAT) 與 FireWall-1	- NAT 設定與故障排除 - 防火牆規則處理順序
主題 3: VPN-1 / IPsec VPN	- 站點對站點 VPN 設定 - 加密範圍與金鑰交換機制
主題 4: 記錄、監控與故障排除	- SmartView Tracker 記錄檢視 - 系統診斷與故障排除工具
主題 5: 資安架構
主題 6: 高可用性與效能優化	- ClusterXL 設定 - 負載平衡與故障轉移概念
主題 7: 使用者驗證與管理	- 使用者管理整合 - 驗證方式
主題 8: SmartDefense / 入侵防護機制	- 攻擊防護機制 - 資安更新與防護設定檔

最新的 CheckPoint Certification 156-310 免費考試真題：

問題 #1

What is NOT true if you add a SecuRemote site and its encryption domain overlaps an already configured site?

A. A red X is placed over the new sites icon.
B. The new site is disabled.
C. The existing conflicting site is disabled.
D. A warning is displayed.

問題 #2

Dr Billis a VPN-1/FireWall-1 Security Administrator attempting to implement SecuRemote access. Dr Billcreates and configures a SecuRemote user. When he goes to his RemoteAccess Community and attempts to add the new user as a participant, the user is not listed. Why is the user NOT listed?

A. Only user groups, not individual users, may be participants in the RemoteAccess Community.
B. Dr Billdid not specify an authentication method for the new user.
C. Only administrators may be participants in the RemoteAccess Community, not default users.
D. Only gateways may be participants in the RemoteAccess Community. Users are not eligible participants.
E. Dr Billspecified encryption parameters for the user that do not match the RemoteAccess Community's encryption parameters.

問題 #3

If you do not configure any groups during Solaris installation, ONLY the Super-User will be able to access and execute the VPN-1/Firewall-1 Module.

A. False
B. True

問題 #4

What is the name given to a code that can be attached to a message that uniquely identifies the message and verifies that it hasn't been tampered with?

A. Digital affirmation
B. Digital lock
C. Digital signature
D. Digital authentication

問題 #5

Which of the following selections lists the three security components essential to guaranteeing the security of network connections?

A. Encryption, inspection, routing.
B. DHCP, quality of service, IP pools.
C. NAT, traffic control, topology.
D. Encryption, authentication, integrity.
E. Static addressing, cryptosystems, spoofing.

問題與答案：

問題 #1
答案： C

問題 #2
答案： A

問題 #3
答案： A,B

問題 #4
答案： C

問題 #5
答案： D