최신 CPEPS 156-215-71 무료샘플문제:
1. Which CLI command verifies the number of cores on your firewall machine?
A) cpstat fw -f core
B) fw ctl core stat
C) fw ctl multik stat
D) fw ctl pstat
2. You are working with multiple Security Gateways that enforce a common set of rules. To minimize the number of policy packages, which one of the following would you choose to do?
A) Create a separate Security Policy package for each remote Security Gateway and specify Install On / Gateways.
B) Install a separate local Security Management Server and SmartConsole for each remote Security Gateway.
C) Run separate SmartDashbord instance to login and configure each Security Gateway directly.
D) Create a single Security Policy package with Install On / Target defined whenever a unique rule is required for a specific Gateway.
3. A host on the Internet initiates traffic to the Static NAT IP of your Web server behind the Security Gateway. With the default settings in place for NAT, the initiating packet will translate the_________.
A) source on server side
B) destination on server side
C) destination on client side
D) source on client side
4. Which Check Point address translation method is necessary if you want to connect from a host on the Internet via HTTP to a server with a reserved (RFC 1918) IP address on your DMZ?
A) Static Destination Address Translation
B) Hide Address Translation
C) Dynamic Source Address Translation
D) Port Address Translation
5. A client has created a new Gateway object that will be managed at a remote location. When the client attempts to install the Security Policy to the new Gateway object, the object does not appear in the Install On check box. What should you look for?
A) A Gateway object created using the Check Point > Externally Managed VPN Gateway option from the Network Objects dialog box.
B) A Gateway object created using the Check Point > Security Gateway option in the network objects, dialog box, but still needs to configure the interfaces for the Security Gateway object.
C) Secure Internal Communications (SIC) not configured for the object.
D) Anti-spoofing not configured on the interfaces on the Gateway object.
질문과 대답:
질문 # 1 정답: C | 질문 # 2 정답: D | 질문 # 3 정답: C | 질문 # 4 정답: A | 질문 # 5 정답: A |