CheckPoint 156-215.13 試験概要:
| 認定ベンダー: | Check Point Software Technologies |
|---|---|
| 試験名: | Check Point Certified Security Administrator - GAiA |
| 試験番号: | 156-215.13 |
| 試験形式: | 単一選択式, 複数選択式 |
| 対応言語: | 日本語, 簡体字中国語, 韓国語, 英語 |
| 認定の有効期間: | 2年間 |
| 受験料: | 250～300米ドル |
| 試験時間: | 90 分 |
| 関連資格: | Check Point Certified Security Expert (CCSE) |
| 出題数: | 90 |
| 合格点: | 70% |
| 推奨トレーニング: | Check Point CCSA公式トレーニング |
| 受験申し込み: | Pearson VUEでの受験登録 |
| サンプル問題: | CheckPoint 156-215.13 サンプル問題 |
| 受験方法: | Pearson VUE試験会場での受験、またはOnVUEによるオンライン監視付き受験 |
| 前提条件: | 受験に必須の前提条件はなし。推奨される知識：TCP/IPネットワークの基礎知識、オペレーティングシステムの基本操作、Check Point製品の基礎知識 |
| 公式シラバスのURL: | https://www.checkpoint.com/training/certification/ccsa/ |
CheckPoint 156-215.13 試験シラバストピック:
| セクション | 比重 | 目標 |
|---|---|---|
| 監視とトラフィックの処理 | 20% | - NATの設定
|
| システム保守とSIC | 10% | - バックアップ、復元、バージョンアップ - Secure Internal Communication (SIC) |
| VPNと高可用性 | 15% | - サイト間VPN
|
| 認証とユーザー管理 | 15% | - ユーザーおよびユーザーグループの管理 - 認証方式
|
| Check Pointの技術とアーキテクチャ | 15% | - セキュリティインフラストラクチャの構成要素
|
| セキュリティポリシーの管理 | 25% | - ネットワークオブジェクトとサービス
|
CheckPoint Check Point Certified Security Administrator - GAiA 認定 156-215.13 試験問題：
問題 #1
Your company has two headquarters, one in London, and one in New York. Each office includes several branch offices. The branch offices need to communicate with the headquarters in their country, not with each other, and only the headquarters need to communicate directly. What is the BEST configuration for establishing VPN Communities for this company? VPN Communities comprised of:
A. One star Community with the option to mesh the center of the star: New York and London Gateways added to the center of the star with the mesh center Gateways option checked; all London branch offices defined in one satellite window, but, all New York branch offices defined in another satellite window.
B. Two mesh and one star Community: One mesh Community is set up for each of the headquarters and its branch offices. The star Community is configured with London as the center of the Community and New York is the satellite.
C. Three mesh Communities: One for London headquarters and its branches, one for New York headquarters and its branches, and one for London and New York headquarters.
D. Two star and one mesh Community: One star Community is set up for each site, with headquarters as the Community center, and its branches as satellites. The mesh Community includes only New York and London Gateways.
問題 #2
Which of the following statements accurately describes the command upgrade_export?
A. upgrade_export is used when upgrading the Security Gateway, and allows certain files to be included or excluded before exporting.
B. This command is no longer supported in GAiA.
C. Used primarily when upgrading the Security Management Server, upgrade_export stores all object databases and the /conf directories for importing to a newer Security Gateway version.
D. upgrade_export stores network-configuration data, objects, global properties, and the database revisions prior to upgrading the Security Management Server.
問題 #3
An internal host initiates a session to and is set for Hide NAT behind the Security Gateway. The initiating traffic is an example of ____________.
A. None of these
B. source NAT
C. destination NAT
D. client side NAT
問題 #4
A marketing firm's networking team is trying to troubleshoot user complaints regarding access to audio-streaming material from the Internet. The networking team asks you to check the object and rule configuration settings for the perimeter Security Gateway. Which SmartConsole application should you use to check these objects and rules?
A. SmartDashboard
B. SmartView Monitor
C. SmartView Status
D. SmartView Tracker
問題 #5
You receive a notification that long-lasting Telnet connections to a mainframe are dropped after an hour of inactivity. Reviewing SmartView Tracker shows the packet is dropped with the error:
Unknown established connection
How do you resolve this problem without causing other security issues? Choose the BEST answer.
A. Increase the TCP session timeout under Global Properties > Stateful Inspection.
B. Create a new TCP service object on port 23 called Telnet-mainframe. Define a service-based session timeout of 24-hours. Use this new object only in the rule that allows the Telnet connections to the mainframe.
C. Ask the mainframe users to reconnect every time this error occurs.
D. Increase the service-based session timeout of the default Telnet service to 24-hours.
解説：
| 問題 #1 正解： D | 問題 #2 正解： C | 問題 #3 正解： B | 問題 #4 正解： A | 問題 #5 正解： B |
1187 お客様のコメント
品質保証JPexamはIT認定試験のシラバスに従って、試験問題の範囲を正確に絞って、的中率が99％の最新問題集を捧げます。
1年間の無料更新サービスJPexamは1年以内に問題集の無料更新サービスを提供し、お客様がいつでも最新版の問題集を持つことを保証いたします。もし試験の内容が変更されたら、弊社は直ちにお客様にお知らせします。それに、弊社の問題集が更新されたら、早速メールで最新バージョンを送付いたします。
全額返金JPexamの問題集を利用すると、短時間で勉強しても試験に合格できるのを保証いたします。試験に不合格になってしまった場合、弊社は全額返金いたします。(
ご購入前のお試しJPexamは問題集のサンプルを無料で提供いたします。ご購入前にサンプルを試用して製品の品質を確認することができます。ご遠慮なく利用してください。
