최신CheckPoint Check Point Certified Security Administrator R71 - 156-215.71무료샘플문제

A. Destination NAT

B. Client side NAT

C. Source NAT

D. None of these

A. Antivirus status is monitored using SmartView Tracker.

B. A scan failure will only occur if the antivirus engine fails to initialize.

C. All file types are considered "at risk", and are not configurable by the Administrator or the Security Policy.

D. The antivirus engine acts as a proxy, caching the scanned file before delivering it to the client.

A. You first need to initialize SIC in SmartUpdate.

B. You have not established Secure Internal Communications (SIC) between the Security Gateway and Management Server. You must initialize SIC on both the Security Gateway and the Management Server.

C. You have not established Secure Internal Communications (SIC) between the Security Gateway and Management Server. You must initialize SIC on the Security Management Server.

D. You first need to run the fw unloadlocal command on the new Security Gateway.

A. TCP source port

B. Rule author

C. TCP handshake average duration

D. Top used QOS rule

A. The NAT IP address must be added to the anti-spoofing group of the external gateway interface

B. No extra configuration is needed

C. A proxy ARP entry, to ensure packets destined for the public IP address will reach the Security Gateway's external interface.

D. A static route, to ensure packets destined for the public NAT IP address will reach the Gateway's internal interface.

A. All is fine and can be used as is.

B. Only 128 bit keys are used for phase 1 keys which are protecting phase 2, so the longer key length in phase 2 only costs performance and does not add security due to a shorter key in phase
1.D. The 2 algorithms do not have the same key length and so don't work together. You will get the error ".... No proposal chosen...."

C. All is fine as the longest key length has been chosen for encrypting the data and a shorter key length for higher performance for setting up the tunnel.

A. Most accessed Rule Base rule

B. Number of concurrent IKE negotiations

C. Destination IP address

D. SIC revoke certificate event

A. Network Traffic and Stealth rules

B. Cleanup and Stealth rules

C. Administrator Access and Stealth rules

D. Cleanup and Administrator Access rules

A. C1>F6; C2>F4; C3>F2; C4>F5

B. C1>F4; C2>F6, C3>F3; C4>F2

C. C1>F2; C2>F1; C3>F6; C4>F4

D. C1>F2; C4>F4; C3>F1; C4>F5

A. Send a Certified Security Engineer to each site to perform the update.

B. Use a SSH connection to SCP the HFA to each Security Gateway. Once copied locally, imitate a remote installation command and monitor the installation progress with SmartView Monitor

C. Send a CD-ROM with the HFA to each location and have local personnel install it.

D. Use SmartUpdate to install the packages to each of the Security Gateways remotely.

A. To permit implied rules

B. To prevent users from connecting directly to the gateway

C. To drop all traffic to the management server that is not explicitly permitted

D. To permit management traffic

A. Authentication

B. Data integrity

C. Nonrepudiation

D. Availability

A. SmartUpdate

B. Smart Event

C. SmartView Monitor

D. SmartView Status

A. After Stealth Rule

B. Before Last

C. Last

D. First