Pass4test 덤프는 IT 전문가들이 IT인증시험 실제문제를 연구분석하여 제작한 가장 좋은 시험대비자료입니다. CheckPoint 156-315.13 (Check Point Certified Security Expert)시험은 높은 난이도로 이름있는 과목입니다. 이 시험을 패스하여 인기자격증을 취득하시면 연봉협상이나 승진 혹은 이직에 많은 도움이 됩니다. CheckPoint 156-315.13 (Check Point Certified Security Expert)시험대비는 pass4test 덤프로 하면 최고입니다.

 

NO.1 Which of the following access options would you NOT use when configuring Captive Portal?
A. Through the Firewall policy
B. From the Internet
C. Through all interfaces
D. Through internal interfaces
Answer: B

NO.2 Which of the following statements accurately describes the migrate command?
A. upgrade_export is used when upgrading the Security Gateway, and allows certain files to be
included or excluded before exporting.
B. upgrade_export stores network-configuration data, objects, global properties, and the database
revisions prior to upgrading the Security Management Server.
C. Used primarily when upgrading the Security Management Server, migrate stores all object
databases and the conf directories for importing to a newer version of the Security Gateway
D. Used when upgrading the Security Gateway, upgrade_export includes modified files, such as in
the directories /lib and /conf.
Answer: C

NO.3 _______________ manages Standard Reports and allows the administrator to specify
automatic uploads of reports to a central FTP server.
A. SmartDashboard Log Consolidator
B. SmartReporter
C. Security Management Server
D. SmartReporter Database
Answer: B

NO.4 You are preparing computers for a new ClusterXL deployment. For your cluster, you plan to use
four machines with the following configurations:
Cluster Member 1: OS: SecurePlatform, NICs: QuadCard, memory: 1 GB, Security Gateway only,
version: R76
Cluster Member 2: OS: SecurePlatform, NICs: 4 Intel 3Com, memory: 1 GB, Security Gateway only,
version: R76
Cluster Member 3: OS: SecurePlatform, NICs: 4 other manufacturers, memory: 512 MB, Security
Gateway only, version: R76
Security Management Server: MS Windows 2003, NIC. Intel NIC (1), Security Gateway and primary
Security Management Server installed, version: R76
Are these machines correctly configured for a ClusterXL deployment?
A. No, the Security Gateway cannot be installed on the Security Management Pro Server.
B. No, Cluster Member 3 does not have the required memory.
C. Yes, these machines are configured correctly for a ClusterXL deployment.
D. No, the Security Management Server is not running the same operating system as the cluster
members.
Answer: C

NO.5 You have an internal FTP server, and you allow downloading, but not uploading. Assume
Network Address Translation is set up correctly, and you want to add an inbound rule with:
Source: Any Destination: FTP server Service: FTP resources object.
How do you configure the FTP resource object and the action column in the rule to achieve this goal?
A. Enable only the "Get" method in the FTP Resource Properties, and use this method in the rule,
with action accept.
B. Enable only the "Get" method in the FTP Resource Properties and use it in the rule, with action
drop.
C. Enable both "Put" and "Get" methods in the FTP Resource Properties and use them in the rule,
with action drop.
D. Disable "Get" and "Put" methods in the FTP Resource Properties and use it in the rule, with
action accept.
E. Enable only the "Put" method in the FTP Resource Properties and use it in the rule, with action
accept.
Answer: A

NO.6 Which of the following statements is TRUE concerning MEP VPN's?
A. The VPN Client is assigned a Security Gateway to connect to based on a priority list, should the
first connection fail.
B. MEP Security Gateways can be managed by separate Management Servers.
C. MEP VPN's are restricted to the location of the gateways.
D. State synchronization between Secruity Gateways is required.
Answer: B

NO.7 Using IPS, how do you notify the Security Administrator that malware is scanning specific ports?
By enabling:
A. Malware Scan protection
B. Sweep Scan protection
C. Host Port Scan
D. Malicious Code Protector
Answer: B

NO.8 When configuring an LDAP Group object, which option should you select if you want the
gateway to reference the groups defined on the LDAP server for authentication purposes?
A. Only Group in Branch
B. Only Sub Tree
C. OU Auth and select Group Name
D. All Account-Unit's Users
Answer: A

NO.9 You want only RAS signals to pass through H.323 Gatekeeper and other H.323 protocols,
passing directly between end points. Which routing mode in the VoIP Domain Gatekeeper do you
select?
A. Direct
B. Direct and Call Setup
C. Call Setup
D. Call Setup and Call Control
Answer: A

NO.10 Based on the following information, which of the statements below is FALSE?
A DLP Rule Base has the following conditions: Data Type =Password Protected File Source=My
Organization Destination=Outside My Organization Protocol=Any Action=Ask User Exception: Data
Type=Any, Source=Research and Development (R&D) Destination=Pratner1.com Protocol=Any All
other rules are set to Detect. UserCheck is enabled and installed on all client machines.
A. When a user from R&D sends an e-mail with a password protected PDF file as an attachment to
xyz@partner1 .com, he will be prompted by UserCheck.
B. When a user from Finance sends an e-mail with an encrypted ZIP file as an attachment to. He will
be prompted by UserCheck.
C. Another rule is added: Source = R&D, Destination = partner1.com, Protocol = Any, Action = Inform.
When a user from R&D sends an e-mail with an encrypted ZIP file as an attachment to, he will be
prompted by UserCheck.
D. When a user from R&D sends an e-mail with an encrypted ZIP file as an attachment to , he will
NOT be prompted by UserCheck.
Answer: B

NO.11 Which of the following statements is TRUE concerning MEP VPN's?
A. State synchronization between Secruity Gateways is required.
B. MEP VPN's are not restricted to the location of the gateways.
C. The VPN Client is assigned a Security Gateway to connect to based on a priority list, should the
first connection fail.
D. MEP Security Gateways cannot be managed by separate Management Servers.
Answer: B

NO.12 What type of object may be explicitly defined as a MEP VPN?
A. Mesh VPN Community
B. Any VPN Community
C. Remote Access VPN Community
D. Star VPN Community
Answer: D

NO.13 Public keys and digital certificates provide which of the following? Select three.
A. Non repudiation
B. Data integrity
C. Availability
D. Authentication
Answer: A,B,D

NO.14 Which Check Point product is used to create and save changes to a Log Consolidation Policy?
A. SmartReporter Client
B. Security Management Server
C. SmartDashboard Log Consolidator
D. SmartEvent Server
Answer: C

NO.15 VPN-1 NGX includes a resource mechanism for working with the Common Internet File
System (CIFS). However, this service only provides a limited level of actions for CIFS security. Which
of the following services is NOT provided by a CIFS resource?
A. Log access shares
B. Block Remote Registry Access
C. Log mapped shares
D. Allow MS print shares
Answer: D