Question 1

Each cluster has __________ interfaces.

Accepted Answer

A)  Five 
B)  Two 
C)  Three 
D)  Four 
A)  Five 
B)  Two 
C)  Three 
D)  Four

Question 2

Which policy type is used to enforce bandwidth and traffic control rules?

Accepted Answer

A)  Threat Emulation 
B)  Access Control 
C)  QoS 
D)  Threat Prevention 
A)  Threat Emulation 
B)  Access Control 
C)  QoS 
D)  Threat Prevention

Question 3

Your boss wants you to closely monitor an employee suspected of transferring company secrets to the competition. The IT department discovered the suspect installed a WinSCP client in order to use encrypted communication. Which of the following methods is BEST to accomplish this task?

Accepted Answer

A)  Use SmartView Tracker to follow his actions by filtering log entries that feature the WinSCP destination port. Then, export the corresponding entries to a separate log file for documentation. 
B)  Use SmartDashboard to add a rule in the firewall Rule Base that matches his IP address, and those of potential targets and suspicious protocols. Apply the alert action or customized messaging. 
C)  Watch his IP in SmartView Monitor by setting an alert action to any packet that matches your Rule Base and his IP address for inbound and outbound traffic. 
D)  Send the suspect an email with a keylogging Trojan attached, to get direct information about his wrongdoings. 
A)  Use SmartView Tracker to follow his actions by filtering log entries that feature the WinSCP destination port. Then, export the corresponding entries to a separate log file for documentation. 
B)  Use SmartDashboard to add a rule in the firewall Rule Base that matches his IP address, and those of potential targets and suspicious protocols. Apply the alert action or customized messaging. 
C)  Watch his IP in SmartView Monitor by setting an alert action to any packet that matches your Rule Base and his IP address for inbound and outbound traffic. 
D)  Send the suspect an email with a keylogging Trojan attached, to get direct information about his wrongdoings.

Question 4

Fill in the blank: Service blades must be attached to a ______________.

Accepted Answer

A)  Security Gateway 
B)  Management container 
C)  Management server 
D)  Security Gateway container 
A)  Security Gateway 
B)  Management container 
C)  Management server 
D)  Security Gateway container

Question 5

You want to define a selected administrator's permission to edit a layer. However, when you click the + sign in the "Select additional profile that will be able edit this layer" you do not see anything. What is the most likely cause of this problem? Choose the BEST answer.

Accepted Answer

A)  "Edit layers by Software Blades" is unselected in the Administrator Permission Profile 
B)  There are no Administrator Permission Profiles available and you need to create one first. 
C)  All Administrator Permission Profiles are in use. 
D)  There are no Administrator Permission Profiles defined with limited access privileges. 
A)  "Edit layers by Software Blades" is unselected in the Administrator Permission Profile 
B)  There are no Administrator Permission Profiles available and you need to create one first. 
C)  All Administrator Permission Profiles are in use. 
D)  There are no Administrator Permission Profiles defined with limited access privileges.

Question 6

What is the order of NAT priorities?

Accepted Answer

A)  Static NAT, IP pool NAT, hide NAT 
B)  IP pool NAT, static NAT, hide NAT 
C)  Static NAT, automatic NAT, hide NAT 
D)  Static NAT, hide NAT, IP pool NAT 
A)  Static NAT, IP pool NAT, hide NAT 
B)  IP pool NAT, static NAT, hide NAT 
C)  Static NAT, automatic NAT, hide NAT 
D)  Static NAT, hide NAT, IP pool NAT

Question 7

What is the default shell for the command line interface?

Accepted Answer

A)  Expert 
B)  Clish 
C)  Admin 
D)  Normal 
A)  Expert 
B)  Clish 
C)  Admin 
D)  Normal

Question 8

Which one of the following is true about Threat Extraction?

Accepted Answer

A)  Always delivers a file to user 
B)  Works on all MS Office, Executables, and PDF files 
C)  Can take up to 3 minutes to complete 
D)  Delivers file only if no threats found 
A)  Always delivers a file to user 
B)  Works on all MS Office, Executables, and PDF files 
C)  Can take up to 3 minutes to complete 
D)  Delivers file only if no threats found

Question 9

You are asked to check the status of several user-mode processes on the management server and gateway. Which of the following processes can only be seen on a Management Server?

Accepted Answer

A)  fwd 
B)  fwm 
C)  cpd 
D)  cpwd 
A)  fwd 
B)  fwm 
C)  cpd 
D)  cpwd

Question 10

How do you configure the Security Policy to provide uses access to the Captive Portal through an external (Internet) interface?

Accepted Answer

A)  Change the gateway settings to allow Captive Portal access via an external interface. 
B)  No action is necessary. This access is available by default. 
C)  Change the Identity Awareness settings under Global Properties to allow Captive Policy access on all interfaces. 
D)  Change the Identity Awareness settings under Global Properties to allow Captive Policy access for an external interface. 
A)  Change the gateway settings to allow Captive Portal access via an external interface. 
B)  No action is necessary. This access is available by default. 
C)  Change the Identity Awareness settings under Global Properties to allow Captive Policy access on all interfaces. 
D)  Change the Identity Awareness settings under Global Properties to allow Captive Policy access for an external interface.

Question 11

There are ________ types of software containers ________.

Accepted Answer

A)  Three; security management, Security Gateway, and endpoint security 
B)  Three; Security gateway, endpoint security, and gateway management 
C)  Two; security management and endpoint security 
D)  Two; endpoint security and Security Gateway 
A)  Three; security management, Security Gateway, and endpoint security 
B)  Three; Security gateway, endpoint security, and gateway management 
C)  Two; security management and endpoint security 
D)  Two; endpoint security and Security Gateway

Question 12

Which option, when applied to a rule, allows all encrypted and non-VPN traffic that matches the rule?

Accepted Answer

A)  All Site-to-Site VPN Communities 
B)  Accept all encrypted traffic 
C)  All Connections (Clear or Encrypted) 
D)  Specific VPN Communities 
A)  All Site-to-Site VPN Communities 
B)  Accept all encrypted traffic 
C)  All Connections (Clear or Encrypted) 
D)  Specific VPN Communities

Question 13

On R80.10 when configuring Third-Party devices to read the logs using the LEA (Log Export API) the default Log Server uses port:

Accepted Answer

A)  18210 
B)  18184 
C)  257 
D)  18191 
A)  18210 
B)  18184 
C)  257 
D)  18191

Question 14

Which of the following is NOT a valid application navigation tab in the R80 SmartConsole?

Accepted Answer

A)  Manage and Command Line 
B)  Logs and Monitor 
C)  Security Policies 
D)  Gateway and Servers 
A)  Manage and Command Line 
B)  Logs and Monitor 
C)  Security Policies 
D)  Gateway and Servers

Question 15

The R80 feature ________ permits blocking specific IP addresses for a specified time period.

Accepted Answer

A)  Block Port Overflow 
B)  Local Interface Spoofing 
C)  Suspicious Activity Monitoring 
D)  Adaptive Threat Prevention 
A)  Block Port Overflow 
B)  Local Interface Spoofing 
C)  Suspicious Activity Monitoring 
D)  Adaptive Threat Prevention

Question 16

The _________ software blade enables Application Security policies to allow, block, or limit website access based on user, group, and machine identities.

Accepted Answer

A)  Application Control 
B)  Data Awareness 
C)  URL Filtering 
D)  Threat Emulation 
A)  Application Control 
B)  Data Awareness 
C)  URL Filtering 
D)  Threat Emulation

Question 17

Which of the following is TRUE regarding Gaia command line?

Accepted Answer

A)  Configuration changes should be done in mgmt_cli and use CLISH for monitoring, Expert mode is used only for OS level tasks. 
B)  Configuration changes should be done in expert-mode and CLISH is used for monitoring. 
C)  Configuration changes should be done in mgmt-cli and use expert-mode for OS-level tasks. 
D)  All configuration changes should be made in CLISH and expert-mode should be used for OS-level tasks. 
A)  Configuration changes should be done in mgmt_cli and use CLISH for monitoring, Expert mode is used only for OS level tasks. 
B)  Configuration changes should be done in expert-mode and CLISH is used for monitoring. 
C)  Configuration changes should be done in mgmt-cli and use expert-mode for OS-level tasks. 
D)  All configuration changes should be made in CLISH and expert-mode should be used for OS-level tasks.

Question 18

Sticky Decision Function (SDF) is required to prevent which of the following? Assume you set up an Active-Active cluster.

Accepted Answer

A)  Symmetric routing 
B)  Failovers 
C)  Asymmetric routing 
D)  Anti-Spoofing 
A)  Symmetric routing 
B)  Failovers 
C)  Asymmetric routing 
D)  Anti-Spoofing

Question 19

Which of the following is NOT a back up method?

Accepted Answer

A)  Save backup 
B)  System backup 
C)  snapshot 
D)  Migrate 
A)  Save backup 
B)  System backup 
C)  snapshot 
D)  Migrate

Question 20

Which icon indicates in the WebUI that read/write access is enabled?

Accepted Answer

A)  Pencil 
B)  Padlock 
C)  Book 
D)  Eyeglasses 
A)  Pencil 
B)  Padlock 
C)  Book 
D)  Eyeglasses

Each cluster has __________ interfaces.

Which policy type is used to enforce bandwidth and traffic control rules?

Your boss wants you to closely monitor an employee suspected of transferring company secrets to the competition. The IT department discovered the suspect installed a WinSCP client in order to use encrypted communication. Which of the following methods is BEST to accomplish this task?

Fill in the blank: Service blades must be attached to a ______________.

You want to define a selected administrator's permission to edit a layer. However, when you click the + sign in the "Select additional profile that will be able edit this layer" you do not see anything. What is the most likely cause of this problem? Choose the BEST answer.

What is the order of NAT priorities?

What is the default shell for the command line interface?

Which one of the following is true about Threat Extraction?

You are asked to check the status of several user-mode processes on the management server and gateway. Which of the following processes can only be seen on a Management Server?

How do you configure the Security Policy to provide uses access to the Captive Portal through an external (Internet) interface?

There are types of software containers .

Which option, when applied to a rule, allows all encrypted and non-VPN traffic that matches the rule?

On R80.10 when configuring Third-Party devices to read the logs using the LEA (Log Export API) the default Log Server uses port:

Which of the following is NOT a valid application navigation tab in the R80 SmartConsole?

The R80 feature ________ permits blocking specific IP addresses for a specified time period.

The _________ software blade enables Application Security policies to allow, block, or limit website access based on user, group, and machine identities.

Which of the following is TRUE regarding Gaia command line?

Sticky Decision Function (SDF) is required to prevent which of the following? Assume you set up an Active-Active cluster.

Which of the following is NOT a back up method?

Which icon indicates in the WebUI that read/write access is enabled?

Check Point Certified Security Principles Associate (CCSPA)

Check Point Certified Security Expert - R80

Filters

Exam 2: Check Point Certified Security Administrator (CCSA R80)

Each cluster has __________ interfaces.

Which policy type is used to enforce bandwidth and traffic control rules?

Your boss wants you to closely monitor an employee suspected of transferring company secrets to the competition. The IT department discovered the suspect installed a WinSCP client in order to use encrypted communication. Which of the following methods is BEST to accomplish this task?

Fill in the blank: Service blades must be attached to a ______________.

You want to define a selected administrator's permission to edit a layer. However, when you click the + sign in the "Select additional profile that will be able edit this layer" you do not see anything. What is the most likely cause of this problem? Choose the BEST answer.

What is the order of NAT priorities?

What is the default shell for the command line interface?

Which one of the following is true about Threat Extraction?

You are asked to check the status of several user-mode processes on the management server and gateway. Which of the following processes can only be seen on a Management Server?

How do you configure the Security Policy to provide uses access to the Captive Portal through an external (Internet) interface?

There are ________ types of software containers ________.

Which option, when applied to a rule, allows all encrypted and non-VPN traffic that matches the rule?

On R80.10 when configuring Third-Party devices to read the logs using the LEA (Log Export API) the default Log Server uses port:

Which of the following is NOT a valid application navigation tab in the R80 SmartConsole?

The R80 feature ________ permits blocking specific IP addresses for a specified time period.

The _________ software blade enables Application Security policies to allow, block, or limit website access based on user, group, and machine identities.

Which of the following is TRUE regarding Gaia command line?

Sticky Decision Function (SDF) is required to prevent which of the following? Assume you set up an Active-Active cluster.

Which of the following is NOT a back up method?

Which icon indicates in the WebUI that read/write access is enabled?

Check Point Certified Security Principles Associate (CCSPA)

Check Point Certified Security Expert - R80

Filters

There are types of software containers .