最新の156-915.80問題集で試験を準備する

CheckPoint 156-915.80 試験概要:

CheckPoint 156-915.80 試験シラバストピック:

CheckPoint Check Point Certified Security Expert Update - R80 認定 156-915.80 試験問題：

1. What GUI client would you use to view an IPS packet capture?

A) Smart Update
B) SmartView Tracker
C) Smart Reporter
D) SmartView Monitor

2. You want to implement Static Destination NAT in order to provide external, Internet users access to an internal Web Server that has a reserved (RFC 1918) IP address. You have an unused valid IP address on the network between your Security Gateway and ISP router. You control the router that sits between the firewall external interface and the Internet.
What is an alternative configuration if proxy ARP cannot be used on your Security Gateway?

A) Place a static host route on the firewall for the valid IP address to the internal Web server.
B) Publish a proxy ARP entry on the ISP router instead of the firewall for the valid IP address.
C) Place a static ARP entry on the ISP router for the valid IP address to the firewall's external address.
D) Publish a proxy ARP entry on the internal Web server instead of the firewall for the valid IP address.

3. You are a Security Administrator who has installed Security Gateway R80 on your network. You need to allow a specific IP address range for a partner site to access your intranet Web server. To limit the partner's access for HTTP and FTP only, you did the following:
1) Created manual Static NAT rules for the Web server.
2) Cleared the following settings in the Global Properties > Network Address Translation screen:
- Allow bi-directional NAT
- Translate destination on client side
Do the above settings limit the partner's access?

A) No. The first setting is not applicable. The second setting will reduce performance.
B) Yes. This will ensure that traffic only matches the specific rule configured for this traffic, and that the Gateway translates the traffic after accepting the packet.
C) Yes. Both of these settings are only applicable to automatic NAT rules.
D) No. The first setting is only applicable to automatic NAT rules. The second setting will force translation by the kernel on the interface nearest to the client.

4. John Adams is an HR partner in the ACME organization. ACME IT wants to limit access to HR servers to designated IP addresses to minimize malware infection and unauthorized access risks. Thus, the gateway policy permits access only from John's desktop which is assigned a static IP address 10.0.0.19.
John received a laptop and wants to access the HR Web Server from anywhere in the organization. The IT department gave the laptop a static IP address, but that limits him to operating it only from his desk. The current Rule Base contains a rule that lets John Adams access the HR Web Server from his laptop with a static IP (10.0.0.19). He wants to move around the organization and continue to have access to the HR Web Server.
To make this scenario work, the IT administrator:
1) Enables Identity Awareness on a gateway, selects AD Query as one of the Identity Sources installs the policy.
2) Adds an access role object to the Firewall Rule Base that lets John Adams PC access the HR Web Server from any machine and from any location.
What should John do when he cannot access the web server from a different personal computer?

A) John should install the Identity Awareness Agent
B) John should lock and unlock his computer
C) The access should be changed to authenticate the user instead of the PC
D) Investigate this as a network connectivity issue

5. Fill in the blank: The command _______________ provides the most complete restoration of a R80 configuration.

A) upgrade_import
B) cpconfig
C) fwm dbimport -p <export file>
D) cpinfo -recover

質問と回答：