最新的CCSE認證 156-315.82考試題庫

問題1

When an upgrade is required on 21 Security Gateways managed by a single Security Management Server, the administrator prefers using Central Deployment with SmartConsole. Is this a recommended best practice in such scenarios? Can the administrator choose to upgrade all the Security Gateways together, or must it be done one at a time?

A. No, Central Deployment is not a recommended method when there are more than five Security Gateways to be upgraded. The administrator must use Gaia Portal to upgrade the Security Gateways.

B. Yes, Central Deployment with SmartConsole is a recommended method for upgrading multiple Security Gateways. The administrator can select all 21 Security Gateways for upgrade in batch mode; however, only one Gateway can run the installation at a time while the others are queued.

C. Yes, Central Deployment with SmartConsole is a recommended method for upgrading multiple Security Gateways. The administrator can select all 21 Security Gateways for upgrade in batch mode; however, only up to 10 Gateways can run the installation at the same time while the others are queued.

D. Yes, Central Deployment with SmartConsole is a recommended method for upgrading multiple Security Gateways. The administrator can select only up to 10 Security Gateways for upgrade in batch mode, and these will run simultaneously. Once a batch upgrade is completed, another batch can be selected.

正確答案: C

說明：（僅 VCESoft 成員可見）

問題2

What is Collision Mode in Management HA?

A. This situation is with two Management Servers: both set as Active.

B. This situation is with two Management Servers: both set as Standby.

C. This situation is with three Management Servers: the first set as Active and the second and third set as Standby.

D. This situation is with two Management Servers: the first set as Active and the second set as Standby.

正確答案: A

說明：（僅 VCESoft 成員可見）

問題3

What is true about the magg1 and Sync interfaces on an ElasticXL Cluster?

A. magg1 is a bonded interface; Sync is also a bonded interface.

B. magg1 is a bonded interface; Sync is an individual Sync port.

C. magg1 is only available in Maestro and is a disabled and unused port in ElasticXL. Sync is the Sync port.

D. magg1 is a secondary interface of the Mgmt port; Sync is the Sync port.

正確答案: A

說明：（僅 VCESoft 成員可見）

問題4

When exporting the database, are the logs and indexes automatically exported?

A. Yes.

B. Indexes are exported, but not logs.

C. No.

D. Logs are exported, but not indexes.

正確答案: C

說明：（僅 VCESoft 成員可見）

問題5

According to the policy installation flow, the transfer stage, CPTA, is invoked by the FWM process, which initiates the Transfer/Commit phase. On the Security Gateway side, a process receives the policy files and first stores them into a temporary directory. Which directory for the Transfer is correct for receiving these files?

A. $CPDIR/state/_tmp/FWM1

B. $FWDIR/state/_tmp/FW1

C. $FWDIR/state/_tmp/FW-1

D. $FWDIR/state/local/FW1

正確答案: B

說明：（僅 VCESoft 成員可見）

問題6

Which tool can be used to automate upgrades and Hotfix installations?

A. CDT

B. DA

C. CPUSE

D. API

正確答案: A

說明：（僅 VCESoft 成員可見）

問題7

What happens if two VPN Gateways are members of different VPN Communities?

A. The weaker encryption algorithm in Phase 1 and Phase 2 will be used.

B. The stronger encryption algorithm for Phase 1 and Phase 2 will be used.

C. During renegotiation both parties will generate a random number. The higher number wins and can decide which Security Association to take.

D. This is a non-supported configuration.

正確答案: D

說明：（僅 VCESoft 成員可見）

問題8

Alice and Bob are tasked by their security team lead with deploying Advanced Security Monitoring for all their Check Point Security systems. Which of the features and capabilities of SmartEvent is included?

A. Real-time forensic and event investigation

B. Statistics forensics and log investigation

C. Real-time logging and status investigation

D. Historical forensics and real-time investigation

正確答案: A

說明：（僅 VCESoft 成員可見）

問題9

What is correct regarding the target device for deploying SmartEvent components?

A. SmartEvent can be integrated with the Security Management Server or deployed on a dedicated Log or SmartEvent Server.

B. SmartEvent is just a blade on the Security Management Server and can be activated on a Primary or Secondary SMS only.

C. SmartEvent is always a dedicated standalone exclusive device.

D. SmartEvent works by correlating logs; hence, it has to be deployed on each Log Server. If any Log Server does not include SmartEvent components, then its logs will not be correlated.

正確答案: A

說明：（僅 VCESoft 成員可見）

問題10

Which Management Server process receives an install command when installing a policy?

A. The CPM process is involved in installing a policy to the gateway.

B. The FWM process is involved in installing the policy.

C. The CPWD process invokes the install function.

D. The FWD process is involved in installing a policy.

正確答案: A

說明：（僅 VCESoft 成員可見）

最新的CheckPoint Check Point Certified Security Expert - R82 - 156-315.82免費考試真題

最新更新

站內鏈接

聯系我們