最新なCheckPoint 156-215-71問題集（465題）、真実試験の問題を全部にカバー！

質問 1：
When you change an implicit rule's order from last to first in global properties, how do you make the change take effect?
A. Run fw fetch from the security gateway
B. Select install database from the policy menu
C. Select save from the file menu
D. Reinstall the security policy
正解：D

質問 2：
You enable Automatic Static NAT on an internal host node object with a private IP address of 10.10.10.5, which is NATed into 216.216.216.5. (You use the default settings in Global Properties / NAT.)
When you run fw monitor on the R71 Security Gateway and then start a new HTTP connection from host 10.10.10.5 to browse the Internet, at what point in the monitor output will you observe the HTTP SYN-ACK packet translated from 216.216.216.5 back into 10.10.10.5?
A. I=inbound kernel, after the virtual machine
B. i=inbound kernel, before the virtual machine
C. O=outbound kernel, after the virtual machine
D. o=outbound kernel, before the virtual machine
正解：A

質問 3：
You wish to configure an IKE VPN between two R71 Security Gateways, to protect two networks.
The network behind one Gateway is 10.15.0.0/16, and network 192.168.9.0/24 is behind the peer's Gateway. Which type of address translation should you use to ensure the two networks access each other through the VPN tunnel?
A. Hide NAT
B. Static NAT
C. None
D. Manual NAT
正解：C

質問 4：
Installing a policy usually has no impact on currently existing connections. Which statement is TRUE?
A. Users being authenticated by Client Authentication have to re-authenticate.
B. Site-to-Site VPNs need to re-authenticate, so Phase 1 is passed again after installing the Security Policy.
C. All FTP downloads are reset; users have to start their downloads again.
D. All connections are reset, so a policy install is recommended during announced downtime only.
正解：A

質問 5：
Identify the correct step performed by SmartUpdate to upgrade a remote Security Gateway. After selecting Packages / Distribute and Install Selected Package and choosing the target Gateway, the:
A. SmartUpdate wizard walks the Administrator through a distributed installation.
B. selected package is copied from the CD-ROM of the SmartUpdate PC directly to the Security Gateway and the installation IS performed.
C. selected package is copied from the Package Repository on the Security Management Server to the Security Gateway but the installation IS NOT performed.
D. selected package is copied from the Package Repository on the Security Management Server to the Security Gateway and the installation IS performed.
正解：D

質問 6：
Which do you configure to give remote access VPN users a local IP address?
A. NAT pool
B. Encryption domain pool
C. Authentication pool
D. Office mode IP pool
正解：D

質問 7：
Your bank's distributed R71 installation has Security Gateways up for renewal. Which SmartConsole application will tell you which Security Gateways have licenses that will expire within the next 30 days?
A. SmartUpdate
B. Smart Portal
C. SmartView Tracker
D. SmartDashboard
正解：C

質問 8：
A snapshot delivers a complete backup of SecurePlatform. The resulting file can be stored on servers or as a local file in /var/cpsnapshot/snapshots. How do you restore a local snapshot named MySnapshot.tgz?
A. As expert user, type the command revert --file MySnapshot.tgz.
B. As expert user, type the command snapshot - r MySnapshot.tgz.
C. As expert user, type the command snapshot - R to restore from a local file. Then, provide the correct name.
D. Reboot the system and call the start menu. Select the option Snapshot Management, provide the Expert password and select [L] for a restore from a local file. Then, provide the correct file name.
正解：A