CheckPoint Check Point Certified Security Expert Update - R80 認定 156-915.80 試験問題:

1. Because of pre-existing design constraints, you set up manual NAT rules for your HTTP server. However, your FTP server and SMTP server are both using automatic NAT rules. All traffic from your FTP and SMTP servers are passing through the Security Gateway without a problem, but traffic from the Web server is dropped on rule 0 because of anti-spoofing settings. What is causing this?

A) Routing is not configured correctly.
B) Manual NAT rules are not configured correctly.
C) Translate destination on client side is not checked in Global Properties under Manual NAT Rules.
D) Allow bi-directional NAT is not checked in Global Properties.

2. All R80 Security Servers can perform authentication with the exception of one. Which of the Security Servers can NOT perform authentication?

A) SMTP
B) FTP
C) RLOGIN
D) HTTP

3. After making modifications to the $CVPNDIR/conf/cvpnd.C file, how would you restart the daemon?

A) cvpnrestart
B) cvpnd_restart
C) cvpnd restart
D) cvpnd_restart

4. What is the port used for SmartConsole to connect to the Security Management Server:

A) SIC port 18191/TCP
B) CPM port / TCP port 19009
C) https port 4434/TCP
D) CPMI port 18191/TCP

5. What is the limitation of employing Sticky Decision Function?

A) With SDF enabled, only ClusterXL in legacy mode is supported
B) With SDF enabled, the involved VPN Gateways only supports IKEv1
C) With SDF enabled, you can only have three Sync interfaces at most
D) Acceleration technologies, such as SecureXL and CoreXL are disabled when activating SDF

質問と回答：