Check Point 156-521 問題練習

Question No : 1
Which of the following API commands support pagination? (Choose two)

• A.show objects
• B.show access-rulebase
• C.set host
• D.add user

答えを確認する

正解:
Explanation:
Both show objects and show access-rulebase can return large datasets. Pagination parameters like limit and offset are supported to control the volume of data returned in a single response.

Question No : 2
Why is it important to use publish after modifying access control rules via API?

• A.To flush memory
• B.To notify all users
• C.To apply changes to the policy database
• D.To trigger SmartConsole updates

答えを確認する

正解:
Explanation:
Until changes are published, they exist only within the session. publish commits the access rule modifications to the central policy database, ensuring they are visible and actionable by other users or automation.

Question No : 3
Which command should follow any configuration task (like add, set, or delete) to finalize changes?

• A.publish
• B.logout
• C.restart
• D.verify

答えを確認する

正解:
Explanation:
All configuration changes made during a session are staged until publish is run. This finalizes the changes and applies them across the system for active enforcement.

Question No : 4
Which command allows running multiple API calls within a single request?

• A.run-batch
• B.multi-call
• C.bulk-call
• D.exec-all

答えを確認する

正解:
Explanation:
The multi-call feature allows you to send a list of commands in one API request. It's efficient for performing multiple operations that need to be executed in sequence or grouped.

Question No : 5
What is the role of UID in Management API commands?

• A.Encrypts traffic
• B.Defines object permissions
• C.Uniquely identifies objects
• D.Acts as firewall rule ID

答えを確認する

正解:
Explanation:
Each object in Check Point’s management database has a UID (unique identifier), which is essential for operations like modifying or deleting objects when the name is ambiguous or duplicated.

Question No : 6
Which of the following are required fields when adding a new host using the API? (Choose two)

• A.name
• B.MAC address
• C.IP address
• D.DNS zone

答えを確認する

正解:
Explanation:
Creating a new host requires specifying a name and IPv4 address. Other fields like MAC address or DNS zone are optional and used for more specific configurations.

Question No : 7
What parameter is commonly used to reduce large response payloads when listing objects or rules?

• A.compact
• B.offset
• C.suppress
• D.exclude

答えを確認する

正解:
Explanation:
offset and limit are commonly used parameters in paginated API responses. They help you navigate through large datasets without overloading the client or the server.

Question No : 8
How can you list all access rules in a layer using the API?

• A.show access-layers
• B.show rules
• C.show access-rulebase
• D.get firewall-policy

答えを確認する

正解:
Explanation:
The show access-rulebase command retrieves all access control rules in a given layer. You can filter, paginate, and process results for use in automation or documentation.

Question No : 9
Which command would you use to cleanly end an authenticated session?

• A.exit
• B.logout
• C.stop session
• D.disconnect

答えを確認する

正解:
Explanation:
logout terminates the current API session and releases the associated session UID. It's a best practice to always end your API sessions cleanly for resource and security management.

Question No : 10
What should be done before exiting an API session that made configuration changes?

• A.Flush DNS
• B.Logout
• C.Run save config
• D.Publish

答えを確認する

正解:
Explanation:
Before logging out, you should always run publish to apply your changes. If you skip publishing, any modifications will be lost once the session ends.

Question No : 11
Which commands are part of the object manipulation API set? (Choose two)

• A.add host
• B.check cpu
• C.set network
• D.top

答えを確認する

正解:
Explanation:
add host and set network are examples of object manipulation commands in the Management API. These are used to create or update objects like hosts, networks, services, and rules.

Question No : 12
Which command displays the full JSON structure for a specific host object?

• A.show host --format json
• B.show host name
• C.describe host full
• D.print object json

答えを確認する

正解:
Explanation:
The correct syntax is show host name . It returns the full JSON representation of the host object, which includes all fields, attributes, and metadata.

Question No : 13
Which of the following statements are true about the delete command in API operations? (Choose two)

• A.It can remove users
• B.It creates new objects
• C.It requires object UID or name
• D.It publishes automatically

答えを確認する

正解:
Explanation:
To delete objects like users or hosts, the API requires the object’s UID or name. Deletion does not automatically trigger a publish; changes must be committed using the publish command.

Question No : 14
In the API workflow, what does the set command typically do?

• A.Retrieve object properties
• B.Modify an existing object
• C.Delete an object
• D.Restart the API server

答えを確認する

正解:
Explanation:
The set command is used to modify the properties of existing objects. For example, set host can change the IP address or comments of a previously created host object.

Question No : 15
Which command is used to add a new host object using mgmt_cli?

• A.create host
• B.new host
• C.add host
• D.set host

答えを確認する

正解:
Explanation:
The add host command is used with mgmt_cli to define a new host object. Required parameters typically include the object’s name and IP address, among other optional fields.