CheckPoint 156-915.80 Prüfungsthemen:
| Abschnitt | Ziele |
|---|---|
| VPN und sichere Verbindungen | - Konfiguration von Site-to-Site-VPN - Konzepte für den Fernzugriff per VPN |
| Security Gateway und Gaia OS | - Verwaltung und Konfiguration des Gaia OS - Bereitstellung von Gateways und Richtliniendurchsetzung |
| Aktualisierung und Migration (R80.x) | - Datenbankmigration und Kompatibilitätsaspekte - Aktualisierungspfade und bewährte Verfahren |
| Richtlinienverwaltung und -durchsetzung | - Richtlinien zur Bedrohungsabwehr (IPS, Anti-Bot, Anti-Virus) - Zugriffskontrollrichtlinien |
| Protokollierung, Überwachung und Fehlerbehebung | - Fehlerbehebung bei Verbindungs- und Richtlinienproblemen - Protokollierungs- und Überwachungswerkzeuge in SmartConsole - Verkehrsanalyse und Auswertung von Protokollen |
| Sicherheitsarchitektur und Überblick über die R80.x-Plattform | - Check Point Sicherheitsverwaltungsarchitektur - Konzepte der einheitlichen Sicherheitsverwaltung in R80.x |
| Hochverfügbarkeit und Clustering | - Mechanismen zur Redundanz und Lastverteilung - Konfiguration und Ausfallsicherung mit ClusterXL |
| Identitätserkennung und Authentifizierung | - Integration der Identitätserkennung - Authentifizierungsmethoden und Richtliniendurchsetzung |
CheckPoint Check Point Certified Security Expert Update - R80 156-915.80 Prüfungsfragen mit Lösungen
Which of the following options is available with the GAiA cpconfig utility on a Management Server?
- A. GUI Clients
- B. Time & Date
- C. Export setup
- D. DHCP Server configuration
Antwort: A 🗳️
What is the valid range for VRID value in VRRP configuration?
- A. 1 - 255
- B. 0 - 254
- C. 0 - 255
Virtual Router ID - Enter a unique ID number for this virtual router. The range of valid values is 1 to 255. - D. 1 - 254
Antwort: A 🗳️
Jennifer McHanry is CEO of ACME. She recently bought her own personal iPad. She wants use her iPad to access the internal Finance Web server. Because the iPad is not a member of the Active Directory domain, she cannot identify seamlessly with AD Query. However, she can enter her AD credentials in the Captive Portal and then get the same access as on her office computer. Her access to resources is based on rules in the R80 Firewall Rule Base.
To make this scenario work, the IT administrator must:
1) Enable Identity Awareness on a gateway and select Captive Portal as one of the Identity Sources.
2) In the Portal Settings window in the User Access section, make sure that Name and password login is selected.
3) Create a new rule in the Firewall Rule Base to let Jennifer McHanry access network destinations. Select accept as the Action.
Ms. McHanry tries to access the resource but is unable. What should she do?
- A. Have the security administrator select Any for the Machines tab in the appropriate Access Role
- B. Have the security administrator select the Action field of the Firewall Rule "Redirect HTTP connections to an authentication (captive) portal"
- C. Have the security administrator reboot the firewall
- D. Install the Identity Awareness agent on her iPad
Antwort: B 🗳️
An administrator would like to troubleshoot why templating is not working for some traffic. How can he determine at which rule templating id disabled?
- A. He can use the fw accel statistics command on the gateway
- B. He can use the fwaccel stat command on the gateway
- C. He can use the fwaccel stat command on the Security Management Server
- D. He can use the fw accel command on the gateway
Antwort: B 🗳️
You want VPN traffic to match packets from internal interfaces. You also want the traffic to exit the Security Gateway bound for all site-to-site VPN Communities, including Remote Access Communities. How should you configure the VPN match rule?
- A. internal_clear > All_communities
- B. Internal_clear > External_Clear
- C. Communities > Communities
- D. internal_clear > All_GwToGw
Antwort: A 🗳️
Seite 1 von 100 wird angezeigt.
Fragen 1-5 von 500 werden angezeigt.
995 Kundenbewertungen
