CheckPoint 156-215-71 試験概要:

CheckPoint 156-215-71 試験シラバストピック:

CheckPoint Check Point Certified Security Administrator R71 認定 156-215-71 試験問題：

問題 #1
Which of the following statements BEST describes Check Point's Hide Network Address Translation method?

A. One-to-one NAT which implements PAT (Port Address Translation) for accomplishing both Source and Destination IP address translation
B. Many-to-one NAT which implements PAT (Port Address Translation) for accomplishing both Source and Destination IP address translation
C. Translates many source IP addresses into one source IP address
D. Translates many destination IP addresses into one destination IP address

問題 #2
In order to have full control, you decide to use Manual NAT entries instead of Automatic NAT rules. Which is of the following is NOT true?

A. If you chose Automatic NAT instead, all necessary entries are done for you.
B. When using Dynamic Hide NAT with an address that is not configured on a Gateway interface, you need to add a proxy ARP entry for that address.
C. When using Static NAT, you must add proxy ARP entries to the Gateway for all hiding addresses.
D. When using Static NAT, you must enter ARP entries for the Gateway on all hosts that are using the NAT Gateway with that Gateway's internal interface IP address.

問題 #3
Which Security Gateway R71 configuration setting forces the Client Authentication authorization time-out to refresh, each time a new user is authenticated? The:

A. Global Properties > Authentication parameters, adjusted to allow for Regular Client Refreshment
B. Time properties, adjusted on the user objects for each user, in the source of the Client Authentication rule
C. Refreshable Timeout setting, in the Limits tab of the Client Authentication Action Properties screen
D. IPS > Application Intelligence > Client Authentication > Refresh User Timeout option enabled

問題 #4
After installing Security Gateway R71, you discover that one port on your Intel Quad NIC on the Security Gateway is not fetched by a Get Topology request. What is the most likely cause and solution?

A. If an interface is not configured, it is not recognized. Assign an IP address and subnet mask using the WebUI.
B. The NIC is faulty. Replace it and reinstall.
C. Make sure the driver for your particular NIC is available, and reinstall. You will be prompted for the driver.
D. Your NIC driver is installed but was not recognized. Apply the latest SecurePlatform R71 Hotfix Accumulator (HFA).

問題 #5
In the SmartView Tracker you receive the error, ...peer send invalid ID information... while trying to establish an IKE VPN tunnel. Where does this error normally result from and how can you solve it? This error normally results from:

A. a mismatch in the authentication algorithms used in IKE phase one and can be corrected by changing them to match.
B. a mismatch in the IPs of the VPN tunnel endpoints and can not be resolved.
C. an invalid IP address configured on one tunnel endpoint; normally the internal one in the General tab. This can be solved with link selection or by changing this IP to the one facing the other tunnel endpoint.
D. an invalid IP address configured on one tunnel endpoint, normally the internal one in the General tab. This can be resolved by adding the correct IPs to the Topology tab of both Gateways on both sites.

解説：