CheckPoint Check Point Security Administration NGX II (156-315.1) 認定 156-315 試験問題:

1. In a Management High Availability (HA) configuration, you can configure synchronization to occur automatically, when:
1.The Security Policy is installed.
2.The Security Policy is saved.
3.The Security Administrator logs in to the secondary SmartCenter Server, and changes its status to active.
4.A scheduled event occurs.
5.The user database is installed.
Select the BEST response for the synchronization sequence. Choose one.

A) 1,2,4
B) 1,2,3,4
C) 1,2,5
D) 1,2,3
E) 1,3,4

2. You are preparing computers for a new ClusterXL deployment. For your cluster, you plan to use four machines with the following configurations:
Cluster Member 1: OS: SecurePlatform, NICs: QuadCard, memory: 256 MB, Security Gateway version: VPN-1 NGX Cluster Member 2: OS: SecurePlatform, NICs: four Intel 3Com, memory: 512 MB, Security Gateway version: VPN-1 NGX Cluster Member 3: OS: SecurePlatform, NICs: four other manufacturers, memory: 128 MB, Security Gateway version: VPN-1 NGX SmartCenter Pro Server: MS Windows Server 2003, NIC: Intel NIC (one), Security Gateway and primary SmartCenter Server installed version: VPN-1 NGX Are these machines correctly configured for a ClusterXL deployment?

A) No, Cluster Member 3 does not have the required memory.
B) Yes, these machines are configured correctly for a ClusterXL deployment.
C) No, the SmartCenter Pro Server has only one NIC.
D) No, the SmartCenter Pro Server is not using the same operating system as the cluster members.

3. Which Security Server can perform content-security tasks, but CANNOT perform authentication tasks?

A) Telnet
B) rlogin
C) SMTP
D) FTP
E) HTTP

4. What is the consequence of clearing the "Log VoIP Connection" box in Global Properties?

A) IP addresses are used, instead of object names, in log entries that reference VoIP Domain objects.
B) The log field setting in rules for VoIP protocols are ignored.
C) Dropped VoIP traffic is logged, but accepted VoIP traffic is not logged.
D) The SmartCenter Server stops importing logs from VoIP servers.
E) VoIP protocol-specific log fields are not included in SmartView Tracker entries.

5. Cody is notified by blacklist.org that his site has been reported as a spam relay, due to his SMTP Server being unprotected. Cody decides to implement an SMTP Security Server, to prevent the server from being a spam relay. Which of the following is the most efficient configuration method?

A) Configure the SMTP Security Server to perform MX resolving.
B) Configure the SMTP Security Server to apply a generic "from" address to all outgoing mail.
C) Configure the SMTP Security Server to perform filtering, based on IP address and SMTP protocols.
D) Configure the SMTP Security Server to allow only mail to or from names, within Cody's corporate domain.
E) Configure the SMTP Security Server to work with an OPSEC based product, for content checking.

質問と回答：