CheckPoint Check Point Certified Security Administrator R75 認定 156-215-75 試験問題:

1. In the Security Policy shown here, which rule inhibits Rule 4?

A) Rule 3
B) No rule inhibits Rule 4.
C) Rule 1
D) Rule 2

2. What must a Security Administrator do to comply with a management requirement to log all traffic accepted through the perimeter Security gateway?

A) Check the Log Implied Rules Globally box on the R75 Gateway object.
B) Install the View Implicit Rules package using SmartUpdate
C) In Global Properties > Reporting Tools check the box Enable tracking all rules (including rules marked as None in the Track column). Send these logs to a secondary log server for a complete logging history. Use your normal log server for standard logging for troubleshooting.
D) Define two log serves on the R75 Gateway object Enable Log Implied Rules on the first log server. Enable Log Rule Base on the second log server. Use SmartReporter to merge the two log server records into the same database for HIPPA log audits.

3. Which Security Gateway R75 configuration setting forces the Client Authentication authorization time-out to refresh, each time a new user is authenticated? The:

A) Global Properties > Authentication parameters, adjusted to allow for Regular Client Refreshment
B) Refreshable Timeout setting, in the Limits tab of the Client Authentication Action Properties screen
C) Time properties, adjusted on the user objects for each user, in the source of the Client Authentication rule
D) IPS > Application Intelligence > Client Authentication > Refresh User Timeout option enabled

4. How can you check whether IP forwarding is enabled on an IP Security Appliance?

A) cat/proc/sys/net/ipv4/ip_forward
B) echo 1 > /proc/sys/net/ipv4/ip_forwarding
C) clish -c show routing active enable
D) ipsofwd list

5. You installed Security Management Server on a computer using SecurePlatform in the MegaCorp home office. You use IP address 10.1.1.1. You also installed the Security Gateway on a second SecurePlatform computer, which you plan to ship to another Administrator at a MegaCorp hub office. What is the correct order for pushing SIC certificates to the Gateway before shipping it?
1) Run cpconfig on the gateway, set secure internal communication, enter the activation key and reconfirm.
2) Initialize internal certificate authority (ICA) on the security Management server.
3) Confirm the gateway object with the host name and IP address for the remote site.
4) Click the communication button in the gateway object's general screen, enter the activation key, and click initialize and ok.
5) Install the security policy.

A) 2, 3, 4, 1, 5
B) 2, 3, 4, 5, 1
C) 2, 1, 3, 4, 5
D) 1, 3, 2, 4, 5

質問と回答：