CheckPoint 156-315 考試概覽:

認證廠商:	Check Point Software Technologies
考試名稱:	Check Point Security Administration NGX II (156-315.1)
考試代碼:	156-315.1
相關認證:	Check Point Certified Security Expert (CCSE) R82 (156-315.82) Check Point Certified Security Administrator (CCSA)
證照有效期限:	自考試通過日起 2 年（認證有效期限）
考試時間:	90 分鐘
支援語言:	English
考試形式:	選擇題
及格分數:	70%
考試費用:	約 300 美元
實際考試題數:	100
範例考題:	CheckPoint 156-315 範例考題
考試方式:	透過 Pearson VUE 辦理（可選擇實體考場或線上監考方式應考）。
必備條件:	建議持有 Check Point Certified Security Administrator (CCSA) 認證（依版本不同可能列為必要條件）。
官方大綱網址:	https://training-certifications.checkpoint.com/ 以及 https://www.pearsonvue.com/checkpoint

CheckPoint 156-315 考試大綱主題:

章節	目標
主題 1: 防火牆與威脅防護最佳化	- 效能調校 - 威脅防護工具
主題 2: 進階閘道部署	- 分散式閘道設定 - ClusterXL 與高可用性設定
主題 3: 進階政策設定	- 網路位址轉換與存取規則 - 安全政策最佳實務
主題 4: 管理伺服器高可用性	- 主要/次要管理角色 - 資料庫同步
主題 5: 進階安全監控	- 日誌記錄與合規性管理 - SmartEvent 部署
主題 6: 虛擬私人網路與站點對站點安全防護	- 遠端存取虛擬私人網路概念 - 站點對站點虛擬私人網路建置

最新的 CheckPoint Certification 156-315 免費考試真題：

問題 #1

When you add a resource service to a rule, which ONE of the following actions occur?

A. All packets matching the resource service rule are analyzed or authenticated, based on the resource properties.
B. Users attempting to connect to the destination of the rule will be required to authenticate.
C. All packets matching that rule are either encrypted or decrypted by the defined resource.
D. VPN-1 SecureClient users attempting to connect to the object defined in the Destination column of the rule will receive a new Desktop Policy from the resource.
E. All packets that match the resource in the rule will be dropped.

問題 #2

Which component functions as the Internal Certificate Authority for VPN-1 NGX?

A. Policy Server
B. Security Gateway
C. VPN-1 Certificate Manager
D. SmartCenter Server
E. SmartLSM

問題 #3

Which Security Servers can perform Content Security tasks, but CANNOT perform authentication tasks?

A. HTTP
B. FTP
C. SMTP
D. Telnet

問題 #4

Your organization has many VPN-1 Edge gateways at various branch offices, to allow VPN-1 SecureClient users to access company resources. For security reasons, your organization's Security Policy requires all Internet traffic initiated behind the VPN-1 Edge gateways first be inspected by your headquarters' VPN-1 Pro Security Gateway. How do you configure VPN routing in this star VPN Community?

A. To the center only
B. To the center and other satellites, through the center
C. To the Internet and other targets only
D. To the center; or through the center to other satellites, then to the Internet and other VPN targets

問題 #5

You want only RAS signals to pass through H.323 Gatekeeper and other H.323 protocols, passing directly between end points. Which routing mode in the VoIP Domain Gatekeeper do you select?

A. Direct and Call Setup
B. Direct
C. Call Setup
D. Call Setup and Call Control

問題與答案：

問題 #1
答案： A

問題 #2
答案： D

問題 #3
答案： C

問題 #4
答案： D

問題 #5
答案： B