CheckPoint Accelerated CCSE NGX (156-915.1) 認定 156-915 試験問題:

1. Which of the following actions is most likely to improve the performance of Check Point QoS?

A) Put the most frequently used rules at the bottom of the QoS Rule Base.
B) Define weights in the Default Rule in multiples of 10.
C) Turn "per rule limits" into "per connection limits".
D) Install Check Point QoS only on the external interfaces of the QoS Module.
E) Turn "per rule guarantees" into "per connection guarantees".

2. How does a standby SmartCenter Server receive logs from all Security Gateways, when an active SmartCenter Server fails over?

A) Establish Secure Internal Communications (SIC) between the primary and secondary Servers. The secondary Server can then receive logs from the Gateways, when the active Server fails over.
B) Create a Check Point host object to represent the standby SmartCenter Server. Then select "Secondary SmartCenter Server" and Log Server", from the list of Check Point Products on the General properties screen.
C) The secondary Server's host name and IP address must be added to the Masters file, on the remote Gateways.
D) The remote Gateways must set up SIC with the secondary SmartCenter Server, for logging.
E) On the Log Servers screen (from the Logs and Masters tree on the gateway object's General Properties screen), add the secondary SmartCenter Server object as the additional log server. Reinstall the Securtiy Policy.

3. Which of these changes to a Security Policy optimizes Security Gateway performance?

A) Using domain objects in rules when possible
B) Removing old or unused Security Policies from Policy Packaes.
C) Putting the least-used rule at the top of the Rule Base.
D) Using groups within groups in the manual NAT Rule Base
E) Logging rules as much as possible.

4. Which command allows you to view the contents of an NGX table?

A) fw tab -a <tablename>
B) fw tab -t <tablename>
C) fw tab -s <tablename>
D) fw tab -x <tablename>
E) fw tab -u <tablename>

5. When you hide a rule in a Rule Base, how can you disable the rule?

A) Run cpstop and cpstart on the SmartCenter Server, then disable the rule.
B) When a rule is hidden, it is automatically disabled. You do not need to disable the rule again.
C) Clear Hide from Rules drop-down meun, then right-click and select "Disable Rule (s)".
D) Uninstall the Security Policy, and then disable the rule.
E) Open the Rule Meun, and select Hide and view hidden rules. Select the rule, right-click, and select Disable.

質問と回答：