Question 1

The position of an implied rule is manipulated in the __________________ window.

Accepted Answer

A)  NAT 
B)  Firewall 
C)  Global Properties 
D)  Object Explorer 
A)  NAT 
B)  Firewall 
C)  Global Properties 
D)  Object Explorer C

Question 2

Which utility shows the security gateway general system information statistics like operating system information and resource usage, and individual software blade statistics of VPN, Identity Awareness and DLP?

Accepted Answer

A)  cpconfig 
B)  fw ctl pstat 
C)  cpview 
D)  fw ctl multik stat 
A)  cpconfig 
B)  fw ctl pstat 
C)  cpview 
D)  fw ctl multik stat C

Question 3

Which of the following describes how Threat Extraction functions?

Accepted Answer

A)  Detect threats and provides a detailed report of discovered threats 
B)  Proactively detects threats 
C)  Delivers file with original content 
D)  Delivers PDF versions of original files with active content removed 
A)  Detect threats and provides a detailed report of discovered threats 
B)  Proactively detects threats 
C)  Delivers file with original content 
D)  Delivers PDF versions of original files with active content removed B

Question 4

Your manager requires you to setup a VPN to a new business partner site. The administrator from the partner site gives you his VPN settings and you notice that he setup AES 128 for IKE phase 1 and AES 256 for IKE phase 2. Why is this a problematic setup?

Accepted Answer

A)  The two algorithms do not have the same key length and so don't work together. You will get the error … No proposal chosen… The two algorithms do not have the same key length and so don't work together. You will get the error … No proposal chosen… 
B)  All is fine as the longest key length has been chosen for encrypting the data and a shorter key length for higher performance for setting up the tunnel. 
C)  Only 128 bit keys are used for phase 1 keys which are protecting phase 2, so the longer key length in phase 2 only costs performance and does not add security due to a shorter key in phase 1. 
D)  All is fine and can be used as is. 
A)  The two algorithms do not have the same key length and so don't work together. You will get the error … No proposal chosen… The two algorithms do not have the same key length and so don't work together. You will get the error … No proposal chosen… 
B)  All is fine as the longest key length has been chosen for encrypting the data and a shorter key length for higher performance for setting up the tunnel. 
C)  Only 128 bit keys are used for phase 1 keys which are protecting phase 2, so the longer key length in phase 2 only costs performance and does not add security due to a shorter key in phase 1. 
D)  All is fine and can be used as is.

Question 5

You have enabled "Extended Log" as a tracking option to a security rule. However, you are still not seeing any data type information. What is the MOST likely reason?

Accepted Answer

A)  Logging has disk space issues. Change logging storage options on the logging server or Security Management Server properties and install database. 
B)  Content Awareness is not enabled. 
C)  Identity Awareness is not enabled. 
D)  Log Trimming is enabled. 
A)  Logging has disk space issues. Change logging storage options on the logging server or Security Management Server properties and install database. 
B)  Content Awareness is not enabled. 
C)  Identity Awareness is not enabled. 
D)  Log Trimming is enabled.

Question 6

Ken wants to obtain a configuration lock from other administrator on R80 Security Management Server. He can do this via WebUI or a via CLI. Which command should be use in CLI? Choose the correct answer.

Accepted Answer

A)  remove database lock 
B)  The database feature has one command lock database override. The database feature has one command lock database override. 
C)  override database lock 
D)  The database feature has two commands: lock database override and unlock database. Both will work. 
A)  remove database lock 
B)  The database feature has one command lock database override. The database feature has one command lock database override. 
C)  override database lock 
D)  The database feature has two commands: lock database override and unlock database. Both will work.

Question 7

There are two R77.30 Security Gateways in the Firewall Cluster. They are named FW_A and FW_B. The cluster is configured to work as HA (High availability) with default cluster configuration. FW_A is configured to have higher priority than FW_B. FW_A was active and processing the traffic in the morning. FW_B was standby. Around 1100 am, its interfaces went down and this caused a failover. FW_B became active. After an hour, FW_A's interface issues were resolved and it became operational. When it re-joins the cluster, will it become active automatically?

Accepted Answer

A)  No, since "maintain current active cluster member" option on the cluster object properties is enabled by default 
B)  No, since "maintain current active cluster member" option is enabled by default on the Global Properties 
C)  Yes, since "Switch to higher priority cluster member" option on the cluster object properties is enabled by default 
D)  Yes, since "Switch to higher priority cluster member" option is enabled by default on the Global Properties 
A)  No, since "maintain current active cluster member" option on the cluster object properties is enabled by default 
B)  No, since "maintain current active cluster member" option is enabled by default on the Global Properties 
C)  Yes, since "Switch to higher priority cluster member" option on the cluster object properties is enabled by default 
D)  Yes, since "Switch to higher priority cluster member" option is enabled by default on the Global Properties

Question 8

Which of the following is NOT a valid configuration screen of an Access Role Object?

Accepted Answer

A)  Users 
B)  Networks 
C)  Time 
D)  Machines 
A)  Users 
B)  Networks 
C)  Time 
D)  Machines

Question 9

What data MUST be supplied to the SmartConsole System Restore window to restore a backup?

Accepted Answer

A)  Server, Username, Password, Path, Version 
B)  Username, Password, Path, Version 
C)  Server, Protocol, Username, Password, Destination Path 
D)  Server, Protocol, Username, Password, Path 
A)  Server, Username, Password, Path, Version 
B)  Username, Password, Path, Version 
C)  Server, Protocol, Username, Password, Destination Path 
D)  Server, Protocol, Username, Password, Path

Question 10

Which of the following is NOT an advantage to using multiple LDAP servers?

Accepted Answer

A)  You achieve a faster access time by placing LDAP servers containing the database at remote sites 
B)  Information on a user is hidden, yet distributed across several servers 
C)  You achieve compartmentalization by allowing a large number of users to be distributed across several servers 
D)  You gain High Availability by replicating the same information on several servers 
A)  You achieve a faster access time by placing LDAP servers containing the database at remote sites 
B)  Information on a user is hidden, yet distributed across several servers 
C)  You achieve compartmentalization by allowing a large number of users to be distributed across several servers 
D)  You gain High Availability by replicating the same information on several servers

Question 11

How would you determine the software version from the CLI?

Accepted Answer

A)  fw ver 
B)  fw stat 
C)  fw monitor 
D)  cpinfo 
A)  fw ver 
B)  fw stat 
C)  fw monitor 
D)  cpinfo

Question 12

Fill in the blank: Each cluster has __________ interfaces.

Accepted Answer

A)  Five 
B)  Two 
C)  Three 
D)  Four 
A)  Five 
B)  Two 
C)  Three 
D)  Four

Question 13

R80.10 management server can manage gateways with which versions installed?

Accepted Answer

A)  Versions R77 and higher 
B)  Versions R76 and higher 
C)  Versions R75.20 and higher 
D)  Version R75 and higher 
A)  Versions R77 and higher 
B)  Versions R76 and higher 
C)  Versions R75.20 and higher 
D)  Version R75 and higher

Question 14

The IT Management team is interested in the new features of the Check Point R80.x Management and wants to upgrade but they are concerned that the existing R77.30 Gaia Gateways cannot be managed by R80.x because it is so different. As the administrator responsible for the Firewalls, how can you answer or confirm these concerns?

Accepted Answer

A)  R80.x Management contains compatibility packages for managing earlier versions of Check Point Gateways prior to R80. Consult the R80 Release Notes for more information. 
B)  R80.x Management requires the separate installation of compatibility hotfix packages for managing the earlier versions of Check Point Gateways prior to R80. Consult the R80 Release Notes for more information. 
C)  R80.x Management was designed as a completely different Management system and so can only monitor Check Point Gateways prior to R80. 
D)  R80.x Management cannot manage earlier versions of Check Point Gateways prior to R80. Only R80 and above Gateways can be managed. Consult the R80 Release Notes for more information. 
A)  R80.x Management contains compatibility packages for managing earlier versions of Check Point Gateways prior to R80. Consult the R80 Release Notes for more information. 
B)  R80.x Management requires the separate installation of compatibility hotfix packages for managing the earlier versions of Check Point Gateways prior to R80. Consult the R80 Release Notes for more information. 
C)  R80.x Management was designed as a completely different Management system and so can only monitor Check Point Gateways prior to R80. 
D)  R80.x Management cannot manage earlier versions of Check Point Gateways prior to R80. Only R80 and above Gateways can be managed. Consult the R80 Release Notes for more information.

Question 15

Which NAT rules are prioritized first?

Accepted Answer

A)  Post-Automatic/Manual NAT rules 
B)  Manual/Pre-Automatic NAT 
C)  Automatic Hide NAT 
D)  Automatic Static NAT 
A)  Post-Automatic/Manual NAT rules 
B)  Manual/Pre-Automatic NAT 
C)  Automatic Hide NAT 
D)  Automatic Static NAT

Question 16

Which Check Point software blade prevents malicious files from entering a network using virus signatures and anomaly-based protections from ThreatCloud?

Accepted Answer

A)  Firewall 
B)  Application Control 
C)  Anti-spam and Email Security 
D)  Antivirus 
A)  Firewall 
B)  Application Control 
C)  Anti-spam and Email Security 
D)  Antivirus

Question 17

How can the changes made by an administrator before publishing the session be seen by a superuser administrator?

Accepted Answer

A)  By impersonating the administrator with the 'Login as…' option 
B)  They cannot be seen 
C)  From the SmartView Tracker audit log 
D)  From Manage and Settings > Sessions , right click on the session and click 'View Changes…' From Manage and Settings > Sessions , right click on the session and click 'View Changes…' 
A)  By impersonating the administrator with the 'Login as…' option 
B)  They cannot be seen 
C)  From the SmartView Tracker audit log 
D)  From Manage and Settings > Sessions , right click on the session and click 'View Changes…' From Manage and Settings > Sessions , right click on the session and click 'View Changes…'

Question 18

What are types of Check Point APIs available currently as part of R80.10 code?

Accepted Answer

A)  Security Gateway API, Management API, Threat Prevention API and Identity Awareness Web Services API 
B)  Management API, Threat Prevention API, Identity Awareness Web Services API and OPSEC SDK API 
C)  OSE API, OPSEC SDK API, Threat Prevention API and Policy Editor API 
D)  CPMI API, Management API, Threat Prevention API and Identity Awareness Web Services API 
A)  Security Gateway API, Management API, Threat Prevention API and Identity Awareness Web Services API 
B)  Management API, Threat Prevention API, Identity Awareness Web Services API and OPSEC SDK API 
C)  OSE API, OPSEC SDK API, Threat Prevention API and Policy Editor API 
D)  CPMI API, Management API, Threat Prevention API and Identity Awareness Web Services API

Question 19

To ensure that VMAC mode is enabled, which CLI command you should run on all cluster members?

Accepted Answer

A)  fw ctl set int fwha vmac global param enabled 
B)  fw ctl get int fwha vmac global param enabled; result of command should return value 1 
C)  cphaprob -a if 
D)  fw ctl get int fwha_vmac_global_param_enabled; result of command should return value 1 
A)  fw ctl set int fwha vmac global param enabled 
B)  fw ctl get int fwha vmac global param enabled; result of command should return value 1 
C)  cphaprob -a if 
D)  fw ctl get int fwha_vmac_global_param_enabled; result of command should return value 1

Question 20

Which command can you use to enable or disable multi-queue per interface?

Accepted Answer

A)  cpmq set 
B)  Cpmqueue set 
C)  Cpmq config 
D)  Set cpmq enable 
A)  cpmq set 
B)  Cpmqueue set 
C)  Cpmq config 
D)  Set cpmq enable

The position of an implied rule is manipulated in the __________________ window.

Which utility shows the security gateway general system information statistics like operating system information and resource usage, and individual software blade statistics of VPN, Identity Awareness and DLP?

Which of the following describes how Threat Extraction functions?

Your manager requires you to setup a VPN to a new business partner site. The administrator from the partner site gives you his VPN settings and you notice that he setup AES 128 for IKE phase 1 and AES 256 for IKE phase 2. Why is this a problematic setup?

You have enabled "Extended Log" as a tracking option to a security rule. However, you are still not seeing any data type information. What is the MOST likely reason?

Ken wants to obtain a configuration lock from other administrator on R80 Security Management Server. He can do this via WebUI or a via CLI. Which command should be use in CLI? Choose the correct answer.

Which of the following is NOT a valid configuration screen of an Access Role Object?

What data MUST be supplied to the SmartConsole System Restore window to restore a backup?

Which of the following is NOT an advantage to using multiple LDAP servers?

How would you determine the software version from the CLI?

Fill in the blank: Each cluster has __________ interfaces.

R80.10 management server can manage gateways with which versions installed?

Which NAT rules are prioritized first?

Which Check Point software blade prevents malicious files from entering a network using virus signatures and anomaly-based protections from ThreatCloud?

How can the changes made by an administrator before publishing the session be seen by a superuser administrator?

What are types of Check Point APIs available currently as part of R80.10 code?

To ensure that VMAC mode is enabled, which CLI command you should run on all cluster members?

Which command can you use to enable or disable multi-queue per interface?

Check Point Certified Security Principles Associate (CCSPA)

Check Point Certified Security Expert - R80

Filters

Exam 2: Check Point Certified Security Administrator (CCSA R80)

The position of an implied rule is manipulated in the __________________ window.

Which utility shows the security gateway general system information statistics like operating system information and resource usage, and individual software blade statistics of VPN, Identity Awareness and DLP?

Which of the following describes how Threat Extraction functions?

Your manager requires you to setup a VPN to a new business partner site. The administrator from the partner site gives you his VPN settings and you notice that he setup AES 128 for IKE phase 1 and AES 256 for IKE phase 2. Why is this a problematic setup?

You have enabled "Extended Log" as a tracking option to a security rule. However, you are still not seeing any data type information. What is the MOST likely reason?

Ken wants to obtain a configuration lock from other administrator on R80 Security Management Server. He can do this via WebUI or a via CLI. Which command should be use in CLI? Choose the correct answer.

Which of the following is NOT a valid configuration screen of an Access Role Object?

What data MUST be supplied to the SmartConsole System Restore window to restore a backup?

Which of the following is NOT an advantage to using multiple LDAP servers?

How would you determine the software version from the CLI?

Fill in the blank: Each cluster has __________ interfaces.

R80.10 management server can manage gateways with which versions installed?

Which NAT rules are prioritized first?

Which Check Point software blade prevents malicious files from entering a network using virus signatures and anomaly-based protections from ThreatCloud?

How can the changes made by an administrator before publishing the session be seen by a superuser administrator?

What are types of Check Point APIs available currently as part of R80.10 code?

To ensure that VMAC mode is enabled, which CLI command you should run on all cluster members?

Which command can you use to enable or disable multi-queue per interface?

Check Point Certified Security Principles Associate (CCSPA)

Check Point Certified Security Expert - R80

Filters