最新的CCSE Update認證 156-915.80考試題庫

問題1

You have three Gateways in a mesh community. Each gateway's VPN Domain is their internal network as defined on the Topology tab setting All IP Addresses behind Gateway based on Topology information.
You want to test the route-based VPN, so you created VTIs among the Gateways and created static route entries for the VTIs. However, when you test the VPN, you find out the VPN still go through the regular domain IPsec tunnels instead of the routed VTI tunnels.
What is the problem and how do you make the VPN use the VTI tunnels?

A. Domain VPN takes precedence over the route-based VTI. To make the VPN go through VTI, use an empty group object as each Gateway's VPN Domain

B. Route-based VTI takes precedence over the Domain VPN. Troubleshoot the static route entries to insure that they are correctly pointing to the VTI gateway IP.

C. Route-based VTI takes precedence over the Domain VPN. To make the VPN go through VTI, use dynamic-routing protocol like OSPF or BGP to route the VTI address to the peer instead of static routes

D. Domain VPN takes precedence over the route-based VTI. To make the VPN go through VTI, remove the Gateways out of the mesh community and replace with a star community

正確答案: A

問題2

Events can be categorized and assigned to System Administrators to track their path through the workflow. Which of the following is NOT an option?

A. Under Investigation

B. Pending Investigation

C. False Positive

D. Open

正確答案: D

問題3

As an administrator, you may be required to add the company logo to reports. To do this, you would save the logo as a PNG file with the name 'cover-company-logo.png' and then copy that image file to which directory on the SmartEvent server?

A. $FWDIR/smartview/conf

B. $RTDIR/smartevent/conf

C. $FWDIR/smartevent/conf

D. $RTDIR/smartview/conf

正確答案: D

問題4

Which command shows the current connections distributed by CoreXL FW instances?

A. fw ctl instances -v

B. fw ctl affinity -l

C. fw ctl iflist

D. fw ctl multik stat

正確答案: D

說明：（僅 VCESoft 成員可見）

問題5

Paul has just joined the MegaCorp security administration team. Natalie, the administrator, creates a new administrator account for Paul in SmartDashboard and installs the policy. When Paul tries to login it fails. How can Natalie verify whether Paul's IP address is predefined on the security management server?

A. Login in to Smart Dashboard, access Global Properties, and select Security Management, to verify whether Paul's IP address is listed.

B. Login to Smart Dashboard, access Properties of the SMS, and verify whether Paul's IP address is listed.

C. Type cpconfig on the Management Server and select the option "GUI client List" to see if Paul's IP address is listed.

D. Access the WEBUI on the Security Gateway, and verify whether Paul's IP address is listed as a GUI client.

正確答案: C

問題6

SecureXL improves non-encrypted firewall traffic throughput and encrypted VPN traffic throughput.

A. This statement is false because SecureXL does not improve this traffic but CoreXL does

B. This statement is true because SecureXL does improve all traffic

C. This statement is true because SecureXL does improve this traffic

D. This statement is false because encrypted traffic cannot be inspected SecureXL improved non-encrypted firewall traffic throughput, and encrypted VPN traffic throughput, by nearly an order-of-magnitude- particularly for small packets flowing in long duration connections.

正確答案: C

問題7

What processes does CPM control?

A. DLEServer, Object-Store, CP Process and database changes

B. Object-Store, Database changes, CPM Process and web-services

C. web-services, CPMI process, DLEserver, CPM process

D. web_services, dle_server and object_Store

正確答案: D

問題8

You want to generate a cpinfo file via CLI on a system running GAiA.
This will take about 40 minutes since the log files are also needed. What action do you need to take regarding timeout?

A. Log in as the default user expert and start cpinfo.

B. No action is needed because cpshell has a timeout of one hour by default.

C. Log in as admin, switch to expert mode, set the timeout to one hour with the command, idle 60, then start cpinfo.

D. Log in as Administrator, set the timeout to one hour with the command idle 60 and start cpinfo.

正確答案: D

問題9

In a zero downtime scenario, which command do you run manually after all cluster members are upgraded?

正確答案:

cphaconf set_ccp multicast

問題10

With MTA (Mail Transfer Agent) enabled the gateways manages SMTP traffic and holds external email with potentially malicious attachments. What is required in order to enable MTA (Mail Transfer Agent) functionality in the Security Gateway?

A. Threat Prevention Software Blade Package

B. Threat Cloud Intelligence

C. Endpoint Total Protection

D. Traffic on port 25

正確答案: A

問題11

Where do you create and modify the Mobile Access policy in R80?

A. SmartMonitor

B. SmartConsole

C. SmartEndpoint

D. SmartDashboard

正確答案: D

問題12

You have successfully backed up your Check Point configurations without the OS information. What command would you use to restore this backup?

A. import backup

B. cp_merge

C. restore_backup

D. migrate import

正確答案: D

問題13

When deploying multiple clustered firewalls on the same subnet, what does the firewall administrator need to configure to prevent CCP broadcasts being sent to the wrong cluster?

A. Set the cluster global ID using the command "cphaconf cluster_id set <value>"

B. Set the cluster global ID using the command "fw ctt set cluster_id <value>"

C. Set the fwha_mac_magic parameter in the $FWDIR/boot/fwkern.conf file

D. Set the fwha_mac_magic_forward parameter in the $CPDIR/boot/modules/ha_boot. conf

正確答案: A

問題14

What is the valid range for VRID value in VRRP configuration?

A. 1 - 255

B. 1 - 254

C. 0 - 254

D. 0 - 255
Virtual Router ID - Enter a unique ID number for this virtual router. The range of valid values is 1 to 255.

正確答案: A

最新的CheckPoint Check Point Certified Security Expert Update - R80 - 156-915.80免費考試真題

最新更新

站內鏈接

聯系我們