最新の156-215-75問題集で試験を準備する

CheckPoint 156-215-75 試験概要:

CheckPoint 156-215-75 試験シラバストピック:

CheckPoint Check Point Certified Security Administrator R75 認定 156-215-75 試験問題：

1. You have three servers located in a DMZ, using private IP addresses. You want internal users from 10.10.10.x to access the DMZ servers by public IP addresses. Internal_net
10.10.10.x is configured for Hide NAT behind the Security Gateway's external interface.
What is the best configuration for 10.10.10.x users to access the DMZ servers, using the DMZ servers' public IP addresses?

A) When the source is the internal network 10.10.10.x, configure manual static NAT rules to translate the DMZ servers.
B) When connecting to internal network 10 10.10 x. configure Hide NAT for the DMZ servers.
C) When connecting to the internal network 10.10.10x, configure Hide Nat for the DMZ network behind the DMZ interface of the Security Gateway
D) When connecting to the Internet, configure manual Static NAT rules to translate the DMZ servers

2. Your organization has many Edge Gateways at various branch offices allowing users to access company resources. For security reasons, your organization's Security Policy requires all Internet traffic initiated behind the Edge Gateways first be inspected by your headquarters' R75 Security Gateway. How do you configure VPN routing in this star VPN Community?

A) To center or through the center to other satellites, to Internet and other VPN targets
B) To center and other satellites, through center
C) To Internet and other targets only
D) To center only

3. You are reviewing the Security Administrator activity for a bank and comparing it to the change log. How do you view Security Administrator activity?

A) SmartView Tracker in Network and Endpoint Mode
B) SmartView Tracker in Management Mode
C) SmartView Tracker cannot display Security Administrator activity: instead, view the system logs on the Security Management Server's Operating System
D) SmartView Tracker in Active Mode

4. You want to establish a VPN, using certificates. Your VPN will exchange certificates with an external partner. Which of the following activities should you do first?

A) Exchange exported CA keys and use them to create a new server object to represent your partner's Certificate Authority (CA).
B) Manually import your partner's Certificate Revocation List.
C) Manually import your partner's Control List.
D) Create a new logical-server object to represent your partner's CA

5. When using AD Query to authenticate users for Identity Awareness, identity data is received seamlessly from the Microsoft Active Directory (AD). What is NOT a recommended usage of this method?

A) Leveraging identity in Internet application control
B) Identity-based enforcement for non-AD users (non-Windows and guest users)
C) Basic identity enforcement in the internal network
D) Identity-based auditing and logging

質問と回答：