156-915 試験問題を無料オンラインアクセス

Where can a Security Administrator adjust the unit of measurement (bps, Kbps or Bps), for Check Point QoS bandwidth?

• A.Check Point gateway object properties
• B.QoS Class objects
• C.$CPDIR/conf/qos_props.pf
• D.Advanced Action options in each QoS rule
• E.Global Properties

Jack's project is to define the backup and restore section of his organization's disaster recovery plan for his organization??s distributed NGX installation. Jack must meet the following required and desired objectives:
Required Objective: The security policy repository must be backed up no less frequently than every 24 hours.
Desired Objective: The NGX components that enforce the Security Policies should be backed up no less frequently than once a week.
Desired Objective: Back up NGX logs no less frequently than once a week.
Jack's disaster recovery plan is as follows:
1.*Use the cron utility to run the upgrade_export command each night on the SmartCenter Servers. Configure the organization's routine backup software to back up the files created by the upgrade_export command.
2.*Configure the SecurePlanform backup utility to back up the Security Gateways every Saturday night.
3.*Use the cron utility to run the upgrade_export comand each Saturday night on the Log Servers. Configure an automatic, nightly logswitch. Configure the organization's routine backup software to back up the switched logs every night.
Jack's plan:

• A.Does not meet the required objective.
• B.Meets the required objective but does not meet either desired objective.
• C.Meets the required objective and only one desired objective.
• D.Meets the required objective and both desired objectives.

You have bolcked an IP address via the Block Intruder feature of SmartView Tracker. How can you see the addresses you have blocked?

• A.Run fw sam -va
• B.In SmartView Tracker, click the Active tab, and the actively blocked connections display.
• C.Run fw tab -t sam_blocked_ips.
• D.Run fwm blocked_view
• E.In SmartView Status click the Blocked Intruder tab.

Which of the following actions is most likely to improve the performance of Check Point QoS?

• A.Install Check Point QoS only on the external interfaces of the QoS Module.
• B.Turn "per rule guarantees" into "per connection guarantees".
• C.Define weights in the Default Rule in multiples of 10.
• D.Put the most frequently used rules at the bottom of the QoS Rule Base.
• E.Turn "per rule limits" into "per connection limits".

What is a Consolidation Policy?

• A.The specific Policy used by Eventia Reporter to configure log-management practices
• B.The collective name of the logs generated by Eventia Reporter
• C.The state of the Policy once installed on a Security Gateway
• D.The collective name of the Security Policy, Address Translation, and SmartDefense Policies
• E.A Policy created by Eventia Reporter to generate logs