CheckPoint CCSA 156-215.71

156-215.71자격증시험은 전문적인 관련지식을 테스트하는 인증시험입니다.은 여러분이 156-215.71 시험을 통과할수 있도록 도와주는 사이트입니다. 많은 분들이 많은 시간과 돈을 들여 학원까지 다니면서 CheckPoint 156-215.71시험패스에 최선을 다합니다. 하지만 156-215.71덤프를 구매하시면 20시간 좌우만 투자하면 무조건 156-215.71시험을 패스할 수 있도록 도와드립니다.

최신 CCSA 156-215.71 무료샘플문제:

1. Your R71 primary Security Management Server is installed on SecurePlatform. You plan to schedule the Security Management Server to run fw logswitch automatically every 48 hours. How do you create this schedule?

A) Create a time object, and add 48 hours as the interval. Open the Security Gateway object's Logs and Masters window, enable Schedule log switch, and select the Time object.
B) Create a time object, and add 48 hours as the interval. Select that time object's Global Properties > Logs and Masters window, to schedule a logswitch.
C) Create a time object, and add 48 hours as the interval. Open the primary Security Management Server object's Logs and Masters window, enable Schedule log switch, and select the Time object.
D) On a SecurePlatform Security Management Server, this can only be accomplished by configuring the fw logswitch command via the cron utility.

2. You are trying to save a custom log query in R71 SmartView Tracker, but getting the following error "Could not save 'query-name' (Error Database is Read only).
Which of the following is a likely explanation for this?

A) You do not have OS write permissions on the local SmartView Tracker PC in order to save the custom query locally
B) Another administrator is currently connected to the Security Management Server with read/write permissions which impacts your ability to save custom log queries to the Security Management Server.
C) You do not have the explicit right to save a custom query in your administrator permission profile under SmartConsole customization
D) You have read-only rights to the Security Management Server database.

3. Multi-Corp must comply with industry regulations in implementing VPN solutions among multiple sites. The corporate Information Assurance policy defines the following requirements:
What is the most appropriate setting to comply with these requirements?
Portability Standard Key management Automatic, external PKI Session keys changed at configured times during a connection's lifetime Key length No less than 128-bit Data integrity Secure against inversion and brute-force attacks What is the most appropriate setting to comply with theses requirements?

A) IKE VPNs: DES encryption for IKE phase 1, and 3DES encryption for phase 2, MD 5 hash
B) IKE VPNs: CAST encryption for IKE Phase 1, and SHA 1 encryption for phase 2, DES hash
C) IKE VPNs: AES encryption for IKE Phase 1, and AES encryption for Phase 2; SHA1 hash
D) IKE VPNs: SHA1 encryption for IKE Phase 1, and MD5 encryption for phase 2, AES hash

4. Several Security Policies can be used for different installation targets. The Firewall protecting Human Resources' servers should have its own Policy Package. These rules must be installed on this machine and not on the Internet Firewall. How can this be accomplished?

A) When selecting the correct Firewall in each line of the row Install On of the Rule Base, only this Firewall is shown in the list of possible installation targets after selecting Policy / Install on Target.
B) In the menu of SmartDashboard, go to Policy / Policy Installation Targets and select the correct firewall via Specific Targets.
C) A Rule Base can always be installed on any Check Point Firewall object. It is necessary to select the appropriate target directly after selecting Policy / Install on Target.
D) A Rule Base is always installed on all possible targets. The rules to be installed on a Firewall are defined by the selection in the row Install On of the Rule Base.

5. Which column in the Rule Base is used to define authentication parameters?

A) Source
B) Track
C) Service
D) Action

질문과 대답: