IT認証試験問題集
毎月、GOWUKAKUは1500人以上の受験者が試験準備を助けて、試験に合格するために受験者にご協力します
 ホームページ / 156-215.80 問題集  / 156-215.80 問題練習

Check Point 156-215.80 問題練習

Check Point Certified Security Administrator R80 試験

最新更新時間: 2024/04/09，合計485問。

【2024桜まつりキャンペーン】：156-215.80 最新真題を買う時、日本語版と英語版両方を同時に獲得できます。

実際の問題集を練習し、試験のポイントを了解し、テストに申し込むするかどうかを決めることができます。

さらに試験準備時間の35％を節約するには、156-215.80 問題集を使用してください。

 / 6

Question No : 1
What are the three essential components of the Check Point Security Management Architecture?

正解:
Explanation:
Deployments
Basic deployments:
- Standalone deployment - Security Gateway and the Security Management server are installed on the
same machine.
- Distributed deployment - Security Gateway and the Security Management server are installed on different machines.



Assume an environment with gateways on different sites. Each Security Gateway connects to the Internet on one side, and to a LAN on the other.
You can create a Virtual Private Network (VPN) between the two Security Gateways, to secure all communication between them.
The Security Management server is installed in the LAN, and is protected by a Security Gateway. The Security Management server manages the Security Gateways and lets remote users connect securely to the corporate network. SmartDashboard can be installed on the Security Management server or another computer.
There can be other OPSEC-partner modules (for example, an Anti-Virus Server) to complete the network security with the Security Management server and its Security Gateways.
Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_SecurityManagement_WebAdminGuide/html_frameset.htm?topic=documents/R77/CP_R77_SecurityManagement_WebAdminGuide/118037

Question No : 2
Each cluster has __________ interfaces.

正解:
Explanation:
Each cluster member has three interfaces: one external interface, one internal interface, and one for synchronization. Cluster member interfaces facing in each direction are connected via a switch, router, or VLAN switch.
Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_ClusterXL_AdminGuide/7292.htm

Question No : 3
You work as a security administrator for a large company. CSO of your company has attended a security conference where he has learnt how hackers constantly modify their strategies and techniques to evade detection and reach corporate resources. He wants to make sure that his company has the right protections in place. Check Point has been selected for the security vendor.
Which Check Point products protects BEST against malware and zero-day attacks while ensuring quick delivery of safe content to your users?

正解:
Explanation:
SandBlast Zero-Day Protection
Hackers constantly modify their strategies and techniques to evade detection and reach corporate resources. Zero-day exploit protection from Check Point provides a deeper level of inspection so you can prevent more malware and zero-day attacks, while ensuring quick delivery of safe content to your users.
Reference: https://www.checkpoint.com/products-solutions/zero-day-protection/

Question No : 4
Which feature is NOT provided by all Check Point Mobile Access solutions?

正解:
Explanation:
Types of Solutions
All of Check Point's Remote Access solutions provide:
- Enterprise-grade, secure connectivity to corporate resources.
- Strong user authentication.
- Granular access control.
Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_VPN_AdminGuide/83586.htm

Question No : 5
Which application should you use to install a contract file?

正解:
Explanation:
Using SmartUpdate: If you already use an NGX R65 (or higher) Security Management / Provider-1 / Multi-Domain Management Server, SmartUpdate allows you to import the service contract file that you have downloaded in Step #3.
Open SmartUpdate and from the Launch Menu select 'Licenses & Contracts' -> 'Update Contracts' -> 'From File...' and provide the path to the file you have downloaded in Step #3:



Note: If SmartUpdate is connected to the Internet, you can download the service contract file directly from the UserCenter without going through the download and import steps.
Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk33089

Question No : 6
Joey wants to configure NTP on R80 Security Management Server. He decided to do this via WebUI.
What is the correct IP address and default port to access the Web UI for Gaia platform via browser?

正解:
Explanation:
Access to Web UI Gaia administration interface, initiate a connection from a browser to the default administration IP address: Logging in to the WebUI
Logging in
To log in to the WebUI:

Question No : 7
The Gaia operating system supports which routing protocols?

正解:
Explanation:
The Advanced Routing Suite
The Advanced Routing Suite CLI is available as part of the Advanced Networking Software Blade. For organizations looking to implement scalable, fault-tolerant, secure networks, the Advanced Networking blade enables them to run industry-standard dynamic routing protocols including BGP, OSPF, RIPv1, and RIPv2 on security gateways. OSPF, RIPv1, and RIPv2 enable dynamic routing over a single autonomous system―like a single department, company, or service provider―to avoid network failures. BGP provides dynamic routing support across more complex networks involving multiple autonomous systems―such as when a company uses two service providers or divides a network into multiple areas with different administrators responsible for the performance of each.
Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_SecurePlatform_AdvancedRouting_WebAdmin/html_frameset.htm

Question No : 8
The command __________ provides the most complete restoration of a R80 configuration.

正解:
Explanation:
(Should be "migrate import") "migrate import" Restores backed up configuration for R80 version, in previous versions the command was " upgrade_import".

Question No : 9
In R80, Unified Policy is a combination of

正解:
Explanation:
D is the best answer given the choices.Unified Policy
In R80 the Access Control policy unifies the policies of these pre-R80 Software Blades:
- Firewall and VPN
- Application Control and URL Filtering
- Identity Awareness
- Data Awareness
- Mobile Access
- Security Zones
Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm?topic=documents/R80/CP_R80_SecMGMT/126197&anchor=o129934

Question No : 10
The following graphic shows:



正解:

Question No : 11
Which utility shows the security gateway general system information statistics like operating system information and resource usage, and individual software blade statistics of VPN, Identity Awareness and DLP?

正解:
Explanation:
CPView Utility is a text based built-in utility that can be run ('cpview' command) on Security Gateway /Security Management Server /Multi-Domain Security Management Server. CPView Utility shows statistical data that contain both general system information (CPU, Memory, Disk space) and information for different Software Blades (only on Security Gateway). The data is continuously updated in easy to access views.
Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk101878

Question No : 12
Which type of Check Point license is tied to the IP address of a specific Security Gateway and cannot be transferred to a gateway that has a different IP address?

正解:

Question No : 13
To build an effective Security Policy, use a ________ and _______ rule.

正解:

Question No : 14
The security Gateway is installed on GAiA R80. The default port for the WEB User Interface is _______ .

正解:

Question No : 15
The _________ collects logs and sends them to the _________ .

正解:

 / 6
Check Point