Exam 2: Check Point Certified Security Administrator (CCSA R80)

To install a brand new Check Point Cluster, the MegaCorp IT department bought 1 Smart-1 and 2 Security Gateway Appliances to run a cluster. Which type of cluster is it?

After trust has been established between the Check Point components, what is TRUE about name and IP-address changes?

You have successfully backed up your Check Point configurations without the OS information. What command would you use to restore this backup?

You have enabled "Full Log" as a tracking option to a security rule. However, you are still not seeing any data type information. What is the MOST likely reason?

Fill in the blanks: Default port numbers for an LDAP server is ______ for standard connections and _______ SSL connections.

Which of the following is the most secure means of authentication?

What does it mean if Deyra sees the gateway status:

What must a Security Administrator do to comply with a management requirement to log all traffic accepted through the perimeter Security Gateway?

How do you configure an alert in SmartView Monitor?

Your bank's distributed R77 installation has Security Gateways up for renewal. Which SmartConsole application will tell you which Security Gateways have licenses that will expire within the next 30 days?

Which of the following authentication methods can be configured in the Identity Awareness setup wizard?

What is the difference between an event and a log?

Which one of the following is TRUE?

What are the two high availability modes?

An internal router is sending UDP keep-alive packets that are being encapsulated with GRE and sent through your R77 Security Gateway to a partner site. A rule for GRE traffic is configured for ACCEPT/LOG. Although the keep-alive packets are being sent every minute, a search through the SmartView Tracker logs for GRE traffic only shows one entry for the whole day (early in the morning after a Policy install). Your partner site indicates they are successfully receiving the GRE encapsulated keep-alive packets on the 1-minute interval. If GRE encapsulation is turned off on the router, SmartView Tracker shows a log entry for the UDP keep-alive packet every minute. Which of the following is the BEST explanation for this behavior?

The Gaia operating system supports which routing protocols?

Which information is included in the "Extended Log" tracking option, but is not included in the "Log" tracking option?

Which default user has full read/write access?

How are the backups stored in Check Point appliances?

In R80 Management, apart from using SmartConsole, objects or rules can also be modified using: