Pass4test는 IT인증자격증을 취득하려는 분께 희망을 가져다 드리는 사이트입니다. IT인증시험을 패스하여 국제승인 자격증을 취득하려는 분은 pass4test의 덤프로 시험을 준비하시면 한번에 시험패스 가능합니다. CheckPoint 156-315.13 (Check Point Certified Security Expert)시험은 인기시험입니다. CheckPoint 156-315.13 (Check Point Certified Security Expert) 덤프를 공부하여 시험탈락하시면 두말하지 않고 덤프비용 환불처리해드립니다.

NO.1 Based on the following information, which of the statements below is FALSE?
A DLP Rule Base has the following conditions: Data Type =Password Protected File Source=My
Organization Destination=Outside My Organization Protocol=Any Action=Ask User Exception: Data
Type=Any, Source=Research and Development (R&D) Destination=Pratner1.com Protocol=Any All
other rules are set to Detect. UserCheck is enabled and installed on all client machines.
A. When a user from R&D sends an e-mail with a password protected PDF file as an attachment to
xyz@partner1 .com, he will be prompted by UserCheck.
B. When a user from Finance sends an e-mail with an encrypted ZIP file as an attachment to. He will
be prompted by UserCheck.
C. Another rule is added: Source = R&D, Destination = partner1.com, Protocol = Any, Action = Inform.
When a user from R&D sends an e-mail with an encrypted ZIP file as an attachment to, he will be
prompted by UserCheck.
D. When a user from R&D sends an e-mail with an encrypted ZIP file as an attachment to , he will
NOT be prompted by UserCheck.
Answer: B

NO.2 Which of the following statements is TRUE concerning MEP VPN's?
A. State synchronization between Secruity Gateways is required.
B. MEP VPN's are not restricted to the location of the gateways.
C. The VPN Client is assigned a Security Gateway to connect to based on a priority list, should the
first connection fail.
D. MEP Security Gateways cannot be managed by separate Management Servers.
Answer: B

NO.3 Which Check Point product is used to create and save changes to a Log Consolidation Policy?
A. SmartReporter Client
B. Security Management Server
C. SmartDashboard Log Consolidator
D. SmartEvent Server
Answer: C

NO.4 You want only RAS signals to pass through H.323 Gatekeeper and other H.323 protocols,
passing directly between end points. Which routing mode in the VoIP Domain Gatekeeper do you
select?
A. Direct
B. Direct and Call Setup
C. Call Setup
D. Call Setup and Call Control
Answer: A

NO.5 Which of the following statements is TRUE concerning MEP VPN's?
A. The VPN Client is assigned a Security Gateway to connect to based on a priority list, should the
first connection fail.
B. MEP Security Gateways can be managed by separate Management Servers.
C. MEP VPN's are restricted to the location of the gateways.
D. State synchronization between Secruity Gateways is required.
Answer: B

NO.6 You are preparing computers for a new ClusterXL deployment. For your cluster, you plan to use
four machines with the following configurations:
Cluster Member 1: OS: SecurePlatform, NICs: QuadCard, memory: 1 GB, Security Gateway only,
version: R76
Cluster Member 2: OS: SecurePlatform, NICs: 4 Intel 3Com, memory: 1 GB, Security Gateway only,
version: R76
Cluster Member 3: OS: SecurePlatform, NICs: 4 other manufacturers, memory: 512 MB, Security
Gateway only, version: R76
Security Management Server: MS Windows 2003, NIC. Intel NIC (1), Security Gateway and primary
Security Management Server installed, version: R76
Are these machines correctly configured for a ClusterXL deployment?
A. No, the Security Gateway cannot be installed on the Security Management Pro Server.
B. No, Cluster Member 3 does not have the required memory.
C. Yes, these machines are configured correctly for a ClusterXL deployment.
D. No, the Security Management Server is not running the same operating system as the cluster
members.
Answer: C

NO.7 VPN-1 NGX includes a resource mechanism for working with the Common Internet File
System (CIFS). However, this service only provides a limited level of actions for CIFS security. Which
of the following services is NOT provided by a CIFS resource?
A. Log access shares
B. Block Remote Registry Access
C. Log mapped shares
D. Allow MS print shares
Answer: D

NO.8 Which of the following access options would you NOT use when configuring Captive Portal?
A. Through the Firewall policy
B. From the Internet
C. Through all interfaces
D. Through internal interfaces
Answer: B

NO.9 Public keys and digital certificates provide which of the following? Select three.
A. Non repudiation
B. Data integrity
C. Availability
D. Authentication
Answer: A,B,D

NO.10 _______________ manages Standard Reports and allows the administrator to specify
automatic uploads of reports to a central FTP server.
A. SmartDashboard Log Consolidator
B. SmartReporter
C. Security Management Server
D. SmartReporter Database
Answer: B

NO.11 Which of the following statements accurately describes the migrate command?
A. upgrade_export is used when upgrading the Security Gateway, and allows certain files to be
included or excluded before exporting.
B. upgrade_export stores network-configuration data, objects, global properties, and the database
revisions prior to upgrading the Security Management Server.
C. Used primarily when upgrading the Security Management Server, migrate stores all object
databases and the conf directories for importing to a newer version of the Security Gateway
D. Used when upgrading the Security Gateway, upgrade_export includes modified files, such as in
the directories /lib and /conf.
Answer: C

NO.12 You have an internal FTP server, and you allow downloading, but not uploading. Assume
Network Address Translation is set up correctly, and you want to add an inbound rule with:
Source: Any Destination: FTP server Service: FTP resources object.
How do you configure the FTP resource object and the action column in the rule to achieve this goal?
A. Enable only the "Get" method in the FTP Resource Properties, and use this method in the rule,
with action accept.
B. Enable only the "Get" method in the FTP Resource Properties and use it in the rule, with action
drop.
C. Enable both "Put" and "Get" methods in the FTP Resource Properties and use them in the rule,
with action drop.
D. Disable "Get" and "Put" methods in the FTP Resource Properties and use it in the rule, with
action accept.
E. Enable only the "Put" method in the FTP Resource Properties and use it in the rule, with action
accept.
Answer: A

NO.13 When configuring an LDAP Group object, which option should you select if you want the
gateway to reference the groups defined on the LDAP server for authentication purposes?
A. Only Group in Branch
B. Only Sub Tree
C. OU Auth and select Group Name
D. All Account-Unit's Users
Answer: A

NO.14 What type of object may be explicitly defined as a MEP VPN?
A. Mesh VPN Community
B. Any VPN Community
C. Remote Access VPN Community
D. Star VPN Community
Answer: D

NO.15 Using IPS, how do you notify the Security Administrator that malware is scanning specific ports?
By enabling:
A. Malware Scan protection
B. Sweep Scan protection
C. Host Port Scan
D. Malicious Code Protector
Answer: B