CheckPoint Check Point Certified Security Administrator - GAiA - 156-215.13무료 덤프문제 풀어보기
You have just installed your Gateway and want to analyze the packet size distribution of your traffic with SmartView Monitor.
Unfortunately, you get the message.
"There are no machines that contain Firewall Blade and SmartView Monitor." What should you do to analyze the packet size distribution of your traffic?
Give the BEST answer.
Unfortunately, you get the message.
"There are no machines that contain Firewall Blade and SmartView Monitor." What should you do to analyze the packet size distribution of your traffic?
Give the BEST answer.
정답: D
You want to generate a cpinfo file via CLI on a system running GAiA. This will take about 40 minutes since the log files are also needed. What action do you need to take regarding
timeout?
timeout?
정답: D
Which command would provide the most comprehensive diagnostic information to Check Point Technical Support?
정답: B
Looking at the SYN packets in the Wireshark output,
select the statement that is true about NAT.
select the statement that is true about NAT.
정답: A
Which operating systems are supported by a Check Point Security Gateway on an open server? Select MOST complete list.
정답: B
The technical-support department has a requirement to access an intranet server. When configuring a User Authentication rule to achieve this, which of the following should you remember?
정답: C
A digital signature:
정답: D
Which SmartConsole tool would you use to see the last policy pushed in the audit log?
정답: A
John is the Security Administrator in his company. He installs a new R76 Security Management Server and a new R76 Gateway. He now wants to establish SIC between them. After entering the activation key, he gets the following message in SmartDashboard
"Trust established"
SIC still does not seem to work because the policy won't install and interface fetching does not work. What might be a reason for this?
"Trust established"
SIC still does not seem to work because the policy won't install and interface fetching does not work. What might be a reason for this?
정답: C
You are running a R76 Security Gateway on SecurePlatform. In case of a hardware failure, you have a server with the exact same hardware and firewall version installed. What back up method could be used to quickly put the secondary firewall into production?
정답: D
Which of the following objects is a valid source in an authentication rule?
정답: D
You have three servers located in a DMZ, using private IP addresses. You want internal users from 10.10.10.x to access the DMZ servers by public IP addresses. Internal_net
10.10.10.x is configured for Hide NAT behind the Security Gateway's external interface.
What is the best configuration for 10.10.10.x users to access the DMZ servers, using the DMZ servers' public IP addresses?
10.10.10.x is configured for Hide NAT behind the Security Gateway's external interface.
What is the best configuration for 10.10.10.x users to access the DMZ servers, using the DMZ servers' public IP addresses?
정답: A
Captive Portal is a __________ that allows the gateway to request login information from the user.
정답: B
What action CANNOT be run from SmartUpdate R76?
정답: B
Identify the ports to which the Client Authentication daemon listens by default.
정답: D