Question 1

John is using Management HA. Which Smartcenter should be connected to for making changes?

Accepted Answer

A)  secondary Smartcenter 
B)  active Smartcenter 
C)  connect virtual IP of Smartcenter HA 
D)  primary Smartcenter 
A)  secondary Smartcenter 
B)  active Smartcenter 
C)  connect virtual IP of Smartcenter HA 
D)  primary Smartcenter

Question 2

Which option in a firewall rule would only match and allow traffic to VPN gateways for one Community in common?

Accepted Answer

A)  All Connections (Clear or Encrypted) 
B)  Accept all encrypted traffic 
C)  Specific VPN Communities 
D)  All Site-to-Site VPN Communities 
A)  All Connections (Clear or Encrypted) 
B)  Accept all encrypted traffic 
C)  Specific VPN Communities 
D)  All Site-to-Site VPN Communities

Question 3

What are the three tabs available in SmartView Tracker?

Accepted Answer

A)  Network & Endpoint, Management, and Active 
B)  Network, Endpoint, and Active 
C)  Predefined, All Records, Custom Queries 
D)  Endpoint, Active, and Custom Queries 
A)  Network & Endpoint, Management, and Active 
B)  Network, Endpoint, and Active 
C)  Predefined, All Records, Custom Queries 
D)  Endpoint, Active, and Custom Queries

Question 4

Which of the following commands is used to monitor cluster members?

Accepted Answer

A)  cphaprob stat 
B)  cphaprob status 
C)  cphaprob 
D)  cluster state 
A)  cphaprob stat 
B)  cphaprob status 
C)  cphaprob 
D)  cluster state

Question 5

Ken wants to obtain a configuration lock from other administrator on R80 Security Management Server. He can do this via WebUI or via CLI. Which command should he use in CLI? Choose the correct answer.

Accepted Answer

A)  remove database lock 
B)  The database feature has one command lock database override. The database feature has one command lock database override. 
C)  override database lock 
D)  The database feature has two commands: lock database override and unlock database. Both will work. 
A)  remove database lock 
B)  The database feature has one command lock database override. The database feature has one command lock database override. 
C)  override database lock 
D)  The database feature has two commands: lock database override and unlock database. Both will work.

Question 6

The ________ feature allows administrators to share a policy with other policy packages.

Accepted Answer

A)  Global Policies 
B)  Shared policies 
C)  Concurrent policy packages 
D)  Concurrent policies 
A)  Global Policies 
B)  Shared policies 
C)  Concurrent policy packages 
D)  Concurrent policies

Question 7

What port is used for communication to the User Center with SmartUpdate?

Accepted Answer

A)  CPMI 200 
B)  TCP 8080 
C)  HTTP 80 
D)  HTTPS 443 
A)  CPMI 200 
B)  TCP 8080 
C)  HTTP 80 
D)  HTTPS 443

Question 8

Which of the following are types of VPN communicates?

Accepted Answer

A)  Pentagon, star, and combination 
B)  Star, octagon, and combination 
C)  Combined and star 
D)  Meshed, star, and combination 
A)  Pentagon, star, and combination 
B)  Star, octagon, and combination 
C)  Combined and star 
D)  Meshed, star, and combination

Question 9

The SmartEvent R80 Web application for real-time event monitoring is called:

Accepted Answer

A)  SmartView Monitor 
B)  SmartEventWeb 
C)  There is no Web application for SmartEvent 
D)  SmartView 
A)  SmartView Monitor 
B)  SmartEventWeb 
C)  There is no Web application for SmartEvent 
D)  SmartView

Question 10

Fill in the blank: The position of an implied rule is manipulated in the __________________ window.

Accepted Answer

A)  NAT 
B)  Firewall 
C)  Global Properties 
D)  Object Explorer 
A)  NAT 
B)  Firewall 
C)  Global Properties 
D)  Object Explorer

Question 11

What is the best sync method in the ClusterXL deployment?

Accepted Answer

A)  Use 1 cluster + 1 st sync Use 1 cluster + 1 st sync 
B)  Use 1 dedicated sync interface 
C)  Use 3 clusters + 1 st sync + 2 nd sync + 3 rd sync Use 3 clusters + 1 sync + 2 nd sync + 3 rd 
D)  Use 2 clusters + 1 st sync + 2 nd sync Use 2 clusters + 1 
A)  Use 1 cluster + 1 st sync Use 1 cluster + 1 st sync 
B)  Use 1 dedicated sync interface 
C)  Use 3 clusters + 1 st sync + 2 nd sync + 3 rd sync Use 3 clusters + 1 sync + 2 nd sync + 3 rd 
D)  Use 2 clusters + 1 st sync + 2 nd sync Use 2 clusters + 1

Question 12

Which command can you use to verify the number of active concurrent connections?

Accepted Answer

A)  fw conn all 
B)  fw ctl pst pstat 
C)  show all connections 
D)  show connections 
A)  fw conn all 
B)  fw ctl pst pstat 
C)  show all connections 
D)  show connections

Question 13

What action can be performed from SmartUpdate R77?

Accepted Answer

A)  upgrade_export 
B)  fw stat -1 
C)  cpinfo 
D)  remote_uninstall_verifier 
A)  upgrade_export 
B)  fw stat -1 
C)  cpinfo 
D)  remote_uninstall_verifier

Question 14

Which of the following technologies extracts detailed information from packets and stores that information in state tables?

Accepted Answer

A)  INSPECT Engine 
B)  Stateful Inspection 
C)  Packet Filtering 
D)  Application Layer Firewall 
A)  INSPECT Engine 
B)  Stateful Inspection 
C)  Packet Filtering 
D)  Application Layer Firewall

Question 15

Identify the ports to which the Client Authentication daemon listens on by default?

Accepted Answer

A)  259, 900 
B)  256, 257 
C)  8080, 529 
D)  80, 256 
A)  259, 900 
B)  256, 257 
C)  8080, 529 
D)  80, 256

Question 16

Which limitation of CoreXL is overcome by using (mitigated by) Multi-Queue?

Accepted Answer

A)  There is no traffic queue to be handled 
B)  Several NICs can use one traffic queue by one CPU 
C)  Each NIC has several traffic queues that are handled by multiple CPU cores 
D)  Each NIC has one traffic queue that is handled by one CPU 
A)  There is no traffic queue to be handled 
B)  Several NICs can use one traffic queue by one CPU 
C)  Each NIC has several traffic queues that are handled by multiple CPU cores 
D)  Each NIC has one traffic queue that is handled by one CPU

Question 17

Licenses can be added to the License and Contract repository ________ .

Accepted Answer

A)  From the User Center, from a file, or manually 
B)  From a file, manually, or from SmartView Monitor 
C)  Manually, from SmartView Monitor, or from the User Center 
D)  From SmartView Monitor, from the User Center, or from a file 
A)  From the User Center, from a file, or manually 
B)  From a file, manually, or from SmartView Monitor 
C)  Manually, from SmartView Monitor, or from the User Center 
D)  From SmartView Monitor, from the User Center, or from a file

Question 18

Which of the following is TRUE about the Check Point Host object?

Accepted Answer

A)  Check Point Host has no routing ability even if it has more than one interface installed. 
B)  When you upgrade to R80 from R77.30 or earlier versions, Check Point Host objects are converted to gateway objects. 
C)  Check Point Host is capable of having an IP forwarding mechanism. 
D)  Check Point Host can act as a firewall. 
A)  Check Point Host has no routing ability even if it has more than one interface installed. 
B)  When you upgrade to R80 from R77.30 or earlier versions, Check Point Host objects are converted to gateway objects. 
C)  Check Point Host is capable of having an IP forwarding mechanism. 
D)  Check Point Host can act as a firewall.

Question 19

What will be the effect of running the following command on the Security Management Server?

Accepted Answer

A)  Remove the installed Security Policy. 
B)  Remove the local ACL lists. 
C)  No effect. 
D)  Reset SIC on all gateways. 
A)  Remove the installed Security Policy. 
B)  Remove the local ACL lists. 
C)  No effect. 
D)  Reset SIC on all gateways.

Question 20

Which of the following is NOT a valid backup command for a Security Management Server?

Accepted Answer

A)  save backup 
B)  add backup 
C)  add snapshot 
D)  migrate export 
A)  save backup 
B)  add backup 
C)  add snapshot 
D)  migrate export

John is using Management HA. Which Smartcenter should be connected to for making changes?

Which option in a firewall rule would only match and allow traffic to VPN gateways for one Community in common?

What are the three tabs available in SmartView Tracker?

Which of the following commands is used to monitor cluster members?

Ken wants to obtain a configuration lock from other administrator on R80 Security Management Server. He can do this via WebUI or via CLI. Which command should he use in CLI? Choose the correct answer.

The ________ feature allows administrators to share a policy with other policy packages.

What port is used for communication to the User Center with SmartUpdate?

Which of the following are types of VPN communicates?

The SmartEvent R80 Web application for real-time event monitoring is called:

Fill in the blank: The position of an implied rule is manipulated in the __________________ window.

What is the best sync method in the ClusterXL deployment?

Which command can you use to verify the number of active concurrent connections?

What action can be performed from SmartUpdate R77?

Which of the following technologies extracts detailed information from packets and stores that information in state tables?

Identify the ports to which the Client Authentication daemon listens on by default?

Which limitation of CoreXL is overcome by using (mitigated by) Multi-Queue?

Licenses can be added to the License and Contract repository ________ .

Which of the following is TRUE about the Check Point Host object?

What will be the effect of running the following command on the Security Management Server?

Which of the following is NOT a valid backup command for a Security Management Server?

Check Point Certified Security Principles Associate (CCSPA)

Check Point Certified Security Expert - R80

Filters

Exam 2: Check Point Certified Security Administrator (CCSA R80)

John is using Management HA. Which Smartcenter should be connected to for making changes?

Which option in a firewall rule would only match and allow traffic to VPN gateways for one Community in common?

What are the three tabs available in SmartView Tracker?

Which of the following commands is used to monitor cluster members?

Ken wants to obtain a configuration lock from other administrator on R80 Security Management Server. He can do this via WebUI or via CLI. Which command should he use in CLI? Choose the correct answer.

The ________ feature allows administrators to share a policy with other policy packages.

What port is used for communication to the User Center with SmartUpdate?

Which of the following are types of VPN communicates?

The SmartEvent R80 Web application for real-time event monitoring is called:

Fill in the blank: The position of an implied rule is manipulated in the __________________ window.

What is the best sync method in the ClusterXL deployment?

Which command can you use to verify the number of active concurrent connections?

What action can be performed from SmartUpdate R77?

Which of the following technologies extracts detailed information from packets and stores that information in state tables?

Identify the ports to which the Client Authentication daemon listens on by default?

Which limitation of CoreXL is overcome by using (mitigated by) Multi-Queue?

Licenses can be added to the License and Contract repository ________ .

Which of the following is TRUE about the Check Point Host object?

What will be the effect of running the following command on the Security Management Server?

Which of the following is NOT a valid backup command for a Security Management Server?

Check Point Certified Security Principles Associate (CCSPA)

Check Point Certified Security Expert - R80

Filters