Question 1

With which command can view the running configuration of Gaia-based system.

Accepted Answer

A)  show conf-active 
B)  show configuration active 
C)  show configuration 
D)  show running-configuration 
A)  show conf-active 
B)  show configuration active 
C)  show configuration 
D)  show running-configuration

Question 2

Which of the following commands is used to verify license installation?

Accepted Answer

A)  Cplic verify license 
B)  Cplic print 
C)  Cplic show 
D)  Cplic license 
A)  Cplic verify license 
B)  Cplic print 
C)  Cplic show 
D)  Cplic license

Question 3

A ____ license requires an administrator to designate a gateway for attachment whereas a _____ license is automatically attached to a Security Gateway.

Accepted Answer

A)  Formal; corporate 
B)  Local; formal 
C)  Local; central 
D)  Central; local 
A)  Formal; corporate 
B)  Local; formal 
C)  Local; central 
D)  Central; local

Question 4

Examine the sample Rule Base.   What will be the result of a verification of the policy from SmartConsole?

Accepted Answer

A)  No errors or Warnings 
B)  Verification Error: Empty Source-List and Service-List in Rule 5 (Mail Inbound) 
C)  Verification Error: Rule 4 (Web Inbound) hides Rule 6 (Webmaster access) 
D)  Verification Error: Rule 7 (Clean-Up Rule) hides Implicit Clean-up Rule 
A)  No errors or Warnings 
B)  Verification Error: Empty Source-List and Service-List in Rule 5 (Mail Inbound) 
C)  Verification Error: Rule 4 (Web Inbound) hides Rule 6 (Webmaster access) 
D)  Verification Error: Rule 7 (Clean-Up Rule) hides Implicit Clean-up Rule

Question 5

Fill in the blanks: A Check Point software license consists of a _______ and _______ .

Accepted Answer

A)  Software container; software package 
B)  Software blade; software container 
C)  Software package; signature 
D)  Signature; software blade 
A)  Software container; software package 
B)  Software blade; software container 
C)  Software package; signature 
D)  Signature; software blade

Question 6

Choose what BEST describes users on Gaia Platform.

Accepted Answer

A)  There is one default user that cannot be deleted. 
B)  There are two default users and one cannot deleted. 
C)  There is one default user that can be deleted. 
D)  There are two default users that cannot be deleted and one SmartConsole Administrator. 
A)  There is one default user that cannot be deleted. 
B)  There are two default users and one cannot deleted. 
C)  There is one default user that can be deleted. 
D)  There are two default users that cannot be deleted and one SmartConsole Administrator.

Question 7

On the following graphic, you will find layers of policies.   What is a precedence of traffic inspection for the defined polices?

Accepted Answer

A)  A packet arrives at the gateway, it is checked against the rules in the networks policy layer and then if implicit Drop Rule drops the packet, it comes next to IPS layer and then after accepting the packet it passes to Threat Prevention layer. 
B)  A packet arrives at the gateway, it is checked against the rules in the networks policy layer and then if there is any rule which accepts the packet, it comes next to IPS layer and then after accepting the packet it passes to Threat Prevention layer 
C)  A packet arrives at the gateway, it is checked against the rules in the networks policy layer and then if there is any rule which accepts the packet, it comes next to Threat Prevention layer and then after accepting the packet it passes to IPS layer. 
D)  A packet arrives at the gateway, it is checked against the rules in IPS policy layer and then it comes next to the Network policy layer and then after accepting the packet it passes to Threat Prevention layer. 
A)  A packet arrives at the gateway, it is checked against the rules in the networks policy layer and then if implicit Drop Rule drops the packet, it comes next to IPS layer and then after accepting the packet it passes to Threat Prevention layer. 
B)  A packet arrives at the gateway, it is checked against the rules in the networks policy layer and then if there is any rule which accepts the packet, it comes next to IPS layer and then after accepting the packet it passes to Threat Prevention layer 
C)  A packet arrives at the gateway, it is checked against the rules in the networks policy layer and then if there is any rule which accepts the packet, it comes next to Threat Prevention layer and then after accepting the packet it passes to IPS layer. 
D)  A packet arrives at the gateway, it is checked against the rules in IPS policy layer and then it comes next to the Network policy layer and then after accepting the packet it passes to Threat Prevention layer.

Question 8

What is the purpose of the Stealth Rule?

Accepted Answer

A)  To prevent users from directly connecting to a Security Gateway. 
B)  To reduce the number of rules in the database. 
C)  To reduce the amount of logs for performance issues. 
D)  To hide the gateway from the Internet. 
A)  To prevent users from directly connecting to a Security Gateway. 
B)  To reduce the number of rules in the database. 
C)  To reduce the amount of logs for performance issues. 
D)  To hide the gateway from the Internet.

Question 9

How many users can have read/write access in Gaia at one time?

Accepted Answer

A)  Infinite 
B)  One 
C)  Three 
D)  Two 
A)  Infinite 
B)  One 
C)  Three 
D)  Two

Question 10

Choose what BEST describes the reason why querying logs now is very fast.

Accepted Answer

A)  New Smart-1 appliances double the physical memory install 
B)  Indexing Engine indexes logs for faster search results 
C)  SmartConsole now queries results directly from the Security Gateway 
D)  The amount of logs been store is less than the usual in older versions 
A)  New Smart-1 appliances double the physical memory install 
B)  Indexing Engine indexes logs for faster search results 
C)  SmartConsole now queries results directly from the Security Gateway 
D)  The amount of logs been store is less than the usual in older versions

Question 11

With which command can you view the running configuration of Gaia-based system.

Accepted Answer

A)  show conf-active 
B)  show configuration active 
C)  show configuration 
D)  show running-configuration 
A)  show conf-active 
B)  show configuration active 
C)  show configuration 
D)  show running-configuration

Question 12

You are the Check Point administrator for Alpha Corp with an R80 Check Point estate. You have received a call by one of the management users stating that they are unable to browse the Internet with their new tablet connected to the company Wireless. The Wireless system goes through the Check Point Gateway. How do you review the logs to see what the problem may be?

Accepted Answer

A)  Open SmartLog and connect remotely to the IP of the wireless controller 
B)  Open SmartView Tracker and filter the logs for the IP address of the tablet 
C)  Open SmartView Tracker and check all the IP logs for the tablet 
D)  Open SmartLog and query for the IP address of the Manager's tablet 
A)  Open SmartLog and connect remotely to the IP of the wireless controller 
B)  Open SmartView Tracker and filter the logs for the IP address of the tablet 
C)  Open SmartView Tracker and check all the IP logs for the tablet 
D)  Open SmartLog and query for the IP address of the Manager's tablet

Question 13

Which Check Point software blade provides Application Security and identity control?

Accepted Answer

A)  HTTPS Inspection 
B)  Data Loss Prevention 
C)  URL Filtering 
D)  Application Control 
A)  HTTPS Inspection 
B)  Data Loss Prevention 
C)  URL Filtering 
D)  Application Control

Question 14

Which backup utility captures the most information and tends to create the largest archives?

Accepted Answer

A)  backup 
B)  snapshot 
C)  Database Revision 
D)  migrate export 
A)  backup 
B)  snapshot 
C)  Database Revision 
D)  migrate export

Question 15

A Cleanup rule:

Accepted Answer

A)  logs connections that would otherwise be dropped without logging by default. 
B)  drops packets without logging connections that would otherwise be dropped and logged by default. 
C)  logs connections that would otherwise be accepted without logging by default. 
D)  drops packets without logging connections that would otherwise be accepted and logged by default. 
A)  logs connections that would otherwise be dropped without logging by default. 
B)  drops packets without logging connections that would otherwise be dropped and logged by default. 
C)  logs connections that would otherwise be accepted without logging by default. 
D)  drops packets without logging connections that would otherwise be accepted and logged by default.

Question 16

Choose what BEST describes users on Gaia Platform.

Accepted Answer

A)  There is one default user that cannot be deleted. 
B)  There are two default users and one cannot be deleted. 
C)  There is one default user that can be deleted. 
D)  There are two default users that cannot be deleted and one SmartConsole Administrator. 
A)  There is one default user that cannot be deleted. 
B)  There are two default users and one cannot be deleted. 
C)  There is one default user that can be deleted. 
D)  There are two default users that cannot be deleted and one SmartConsole Administrator.

Question 17

Which back up method uses the command line to create an image of the OS?

Accepted Answer

A)  System backup 
B)  Save Configuration 
C)  Migrate 
D)  snapshot 
A)  System backup 
B)  Save Configuration 
C)  Migrate 
D)  snapshot

Question 18

What does it mean if Deyra sees the gateway status:   Choose the BEST answer.

Accepted Answer

A)  SmartCenter Server cannot reach this Security Gateway 
B)  There is a blade reporting a problem 
C)  VPN software blade is reporting a malfunction 
D)  Security Gateway's MGNT NIC card is disconnected. 
A)  SmartCenter Server cannot reach this Security Gateway 
B)  There is a blade reporting a problem 
C)  VPN software blade is reporting a malfunction 
D)  Security Gateway's MGNT NIC card is disconnected.

Question 19

SmartEvent does NOT use which of the following procedures to identity events:

Accepted Answer

A)  Matching a log against each event definition 
B)  Create an event candidate 
C)  Matching a log against local exclusions 
D)  Matching a log against global exclusions 
A)  Matching a log against each event definition 
B)  Create an event candidate 
C)  Matching a log against local exclusions 
D)  Matching a log against global exclusions

Question 20

What is the default shell of Gaia CLI?

Accepted Answer

A)  Monitor 
B)  CLI.sh 
C)  Read-only 
D)  Bash 
A)  Monitor 
B)  CLI.sh 
C)  Read-only 
D)  Bash

With which command can view the running configuration of Gaia-based system.

Which of the following commands is used to verify license installation?

A license requires an administrator to designate a gateway for attachment whereas a _ license is automatically attached to a Security Gateway.

Examine the sample Rule Base. What will be the result of a verification of the policy from SmartConsole?

Fill in the blanks: A Check Point software license consists of a _ and _ .

Choose what BEST describes users on Gaia Platform.

On the following graphic, you will find layers of policies. What is a precedence of traffic inspection for the defined polices?

What is the purpose of the Stealth Rule?

How many users can have read/write access in Gaia at one time?

Choose what BEST describes the reason why querying logs now is very fast.

With which command can you view the running configuration of Gaia-based system.

Which Check Point software blade provides Application Security and identity control?

Which backup utility captures the most information and tends to create the largest archives?

A Cleanup rule:

Choose what BEST describes users on Gaia Platform.

Which back up method uses the command line to create an image of the OS?

What does it mean if Deyra sees the gateway status: Choose the BEST answer.

SmartEvent does NOT use which of the following procedures to identity events:

What is the default shell of Gaia CLI?

Check Point Certified Security Principles Associate (CCSPA)

Check Point Certified Security Expert - R80

Filters

Exam 2: Check Point Certified Security Administrator (CCSA R80)

With which command can view the running configuration of Gaia-based system.

Which of the following commands is used to verify license installation?

A ____ license requires an administrator to designate a gateway for attachment whereas a _____ license is automatically attached to a Security Gateway.

Examine the sample Rule Base. What will be the result of a verification of the policy from SmartConsole?

Fill in the blanks: A Check Point software license consists of a _______ and _______ .

Choose what BEST describes users on Gaia Platform.

On the following graphic, you will find layers of policies. What is a precedence of traffic inspection for the defined polices?

What is the purpose of the Stealth Rule?

How many users can have read/write access in Gaia at one time?

Choose what BEST describes the reason why querying logs now is very fast.

With which command can you view the running configuration of Gaia-based system.

Which Check Point software blade provides Application Security and identity control?

Which backup utility captures the most information and tends to create the largest archives?

A Cleanup rule:

Choose what BEST describes users on Gaia Platform.

Which back up method uses the command line to create an image of the OS?

What does it mean if Deyra sees the gateway status: Choose the BEST answer.

SmartEvent does NOT use which of the following procedures to identity events:

What is the default shell of Gaia CLI?

Check Point Certified Security Principles Associate (CCSPA)

Check Point Certified Security Expert - R80

Filters

A license requires an administrator to designate a gateway for attachment whereas a _ license is automatically attached to a Security Gateway.

Fill in the blanks: A Check Point software license consists of a _ and _ .