Which Check Point QoS feature is used to dynamically allocate relative portions of available bandwidth?
A. Differentiated Services
B. Low Latency Queuing
C. Limits
D. Guarantees
E. Weighted Fair Queuing
正解:E
質問 2:
You want VPN traffic to match packets from internal interfaces. You also want the traffic to exit the Security Gateway, bound for all site-to-site VPN Communities, including Remote Access Communities. How should you configure the VPN match rule?
A. Internal_clear > Communities
B. Internal_clear > External_Clear
C. internal_clear > All_GwToGw
D. internal_clear > All_communities
E. Communities > Communities
正解:D
質問 3:
Robert has configured a Common Internet File System (CIFS) resource to allow access to the public partition of his company's file server, on \\erisco\goldenapple\files\public. Robert receives reports that users are unable to access the shared partition, unless they use the file server's IP address. Which of the following is a possible cause?
A. Remote registry access is blocked.
B. Mapped shares do not allow administrative locks.
C. Null CIFS sessions are blocked.
D. The CIFS resource is not configured to use Windows name resolution.
E. Access violations are not logged.
正解:D
質問 4:
You want to upgrade a cluster with two members to VPN-1 NGX. The SmartCenter Server and both members are version VPN-1/FireWall-1 NG FP3, with the latest Hotfix. What is the correct upgrade procedure?
1. Change the version, in the General Properties of the gateway-cluster object.
2. Upgrade the SmartCenter Server, and reboot after upgrade.
3. Run cpstop on one member, while leaving the other member running. Upgrade one member at a time, and reboot after upgrade.
4. Reinstall the Security Policy.
A. 2, 3, 1, 4
B. 1, 2, 3, 4
C. 3, 2, 1, 4
D. 1, 3, 2, 4
E. 2, 4, 3, 1
正解:A
質問 5:
You want to create an IKE VPN between two VPN-1 NGX Security Gateways, to protect two networks. The network behind one Gateway is 10.15.0.0/16, and network
192.168.9.0/24 is behind the peer's Gateway. Which type of address translation should you use, to ensure the two networks access each other through the VPN tunnel?
A. Hide NAT
B. Static NAT
C. Hide NAT
D. None
E. Manual NAT
正解:D
質問 6:
You want only RAS signals to pass through H.323 Gatekeeper and other H.323 protocols, passing directly between end points. Which routing mode in the VoIP Domain Gatekeeper do you select?
A. Direct
B. Direct and Call Setup
C. Call Setup and Call Control
D. Call Setup
正解:A
Koutoku -
これを使って不合格になるわけがないよ156-315正解だけでなく,間違い選択肢についても確認できる,詳細な解説だお気に入りです。