CheckPoint Check Point Certified Security Administrator - GAiA 認定 156-215.76 試験問題:

1. Your main internal network 10.10.10.0/24 allows all traffic to the Internet using Hide NAT. You also have a small network 10.10.20.0/24 behind the internal router. You want to configure the kernel to translate the source address only when network 10.10.20.0 tries to access the Internet for HTTP, SMTP, and FTP services. Which of the following configurations will allow this network to access the Internet?

A) Configure one Manual Hide NAT rule for HTTP, FTP, and SMTP services for network 10.10.20.0/24.
B) Configure Automatic Hide NAT on network 10.10.20.0/24 and then edit the Service column in the NAT Rule Base on the automatic rule.
C) Configure Automatic Static NAT on network 10.10.20.0/24.
D) Configure three Manual Static NAT rules for network 10.10.20.0/24, one for each service.

2. All of the following are Security Gateway control connections defined by default implied rules, EXCEPT:

A) Exclusion of specific services for reporting purposes.
B) Communication with server types, such as RADIUS, CVP, UFP, TACACS, and LDAP.
C) Specific traffic that facilitates functionality, such as logging, management, and key exchange.
D) Acceptance of IKE and RDP traffic for communication and encryption purposes.

3. You are using SmartView Tracker to troubleshoot NAT entries. Which column do you check to view the NAT'd source port if you are using Source NAT?

A) XlateSrc
B) XlateDPort
C) XlateSPort
D) XlateDst

4. How can you activate the SNMP daemon on a Check Point Security Management Server?

A) Any of these options will work.
B) In SmartDashboard, right-click a Check Point object and select Activate SNMP.
C) From cpconfig, select SNMP extension.
D) Using the command line, enter snmp_install.

5. To qualify as an Identity Awareness enabled rule, which column MAY include an Access Role?

A) Action
B) Track
C) Destination
D) User

質問と回答：