由頂級 CheckPoint 專家團隊以最高技術水平整理製作，確保 156-315 題庫的專業性和準確性。

本題庫源自我們的 CheckPoint 專家對目前最新的 156-315 輔導指南的整編，可以對您的學習起到極大的幫助作用。我們的團隊成員都是來自指定認證專家、培訓師和 CheckPoint 相關工作從業者，他們對 156-315 考試內容和 CheckPoint 認證要求的資歷瞭如指掌，這樣可以確保 156-315 練習題庫的高質量。你只需在參加 156-315 考試前认真學習下本題庫，將有助於順利完成考試。

CheckPoint 156-315 考試概覽:

認證廠商:	Check Point Software Technologies
考試名稱:	Check Point Security Administration NGX II (156-315.1)
考試代碼:	156-315.1
相關認證:	Check Point Certified Security Expert (CCSE) R82 (156-315.82) Check Point Certified Security Administrator (CCSA)
證照有效期限:	自考試通過日起 2 年（認證有效期限）
考試時間:	90 分鐘
支援語言:	English
考試形式:	選擇題
及格分數:	70%
考試費用:	約 300 美元
實際考試題數:	100
範例考題:	CheckPoint 156-315 範例考題
考試方式:	透過 Pearson VUE 辦理（可選擇實體考場或線上監考方式應考）。
必備條件:	建議持有 Check Point Certified Security Administrator (CCSA) 認證（依版本不同可能列為必要條件）。
官方大綱網址:	https://training-certifications.checkpoint.com/ 以及 https://www.pearsonvue.com/checkpoint

CheckPoint 156-315 考試大綱主題:

章節	目標
主題 1: 防火牆與威脅防護最佳化	- 效能調校 - 威脅防護工具
主題 2: 進階閘道部署	- 分散式閘道設定 - ClusterXL 與高可用性設定
主題 3: 進階政策設定	- 網路位址轉換與存取規則 - 安全政策最佳實務
主題 4: 管理伺服器高可用性	- 主要/次要管理角色 - 資料庫同步
主題 5: 進階安全監控	- 日誌記錄與合規性管理 - SmartEvent 部署
主題 6: 虛擬私人網路與站點對站點安全防護	- 遠端存取虛擬私人網路概念 - 站點對站點虛擬私人網路建置

最新的 CheckPoint Certification 156-315 免費考試真題：

問題 #1

When you add a resource service to a rule, which ONE of the following actions occur?

A. All packets matching the resource service rule are analyzed or authenticated, based on the resource properties.
B. Users attempting to connect to the destination of the rule will be required to authenticate.
C. All packets matching that rule are either encrypted or decrypted by the defined resource.
D. VPN-1 SecureClient users attempting to connect to the object defined in the Destination column of the rule will receive a new Desktop Policy from the resource.
E. All packets that match the resource in the rule will be dropped.

顯示解答討論 0

答案：A 🗳️

問題 #2

Which component functions as the Internal Certificate Authority for VPN-1 NGX?

A. Policy Server
B. Security Gateway
C. VPN-1 Certificate Manager
D. SmartCenter Server
E. SmartLSM

顯示解答討論 0

答案：D 🗳️

問題 #3

Which Security Servers can perform Content Security tasks, but CANNOT perform authentication tasks?

A. HTTP
B. FTP
C. SMTP
D. Telnet

顯示解答討論 0

答案：C 🗳️

問題 #4

Your organization has many VPN-1 Edge gateways at various branch offices, to allow VPN-1 SecureClient users to access company resources. For security reasons, your organization's Security Policy requires all Internet traffic initiated behind the VPN-1 Edge gateways first be inspected by your headquarters' VPN-1 Pro Security Gateway. How do you configure VPN routing in this star VPN Community?

A. To the center only
B. To the center and other satellites, through the center
C. To the Internet and other targets only
D. To the center; or through the center to other satellites, then to the Internet and other VPN targets

顯示解答討論 0

答案：D 🗳️

問題 #5

You want only RAS signals to pass through H.323 Gatekeeper and other H.323 protocols, passing directly between end points. Which routing mode in the VoIP Domain Gatekeeper do you select?