Question 1

Which of the following is NOT a license activation method?

Accepted Answer

A)  SmartConsole Wizard 
B)  Online Activation 
C)  License Activation Wizard 
D)  Offline Activation 
A)  SmartConsole Wizard 
B)  Online Activation 
C)  License Activation Wizard 
D)  Offline Activation

Question 2

Vanessa is attempting to log into the Gaia Web Portal. She is able to login successfully. Then she tries the same username and password for SmartConsole but gets the message in the screenshot image below. She has checked that the IP address of the Server is correct and the username and password she used to login into Gaia is also correct.   What is the most likely reason?

Accepted Answer

A)  Check Point R80 SmartConsole authentication is more secure than in previous versions and Vanessa requires a special authentication key for R80 SmartConsole. Check that the correct key details are used. 
B)  Check Point Management software authentication details are not automatically the same as the Operating System authentication details. Check that she is using the correct details. 
C)  SmartConsole Authentication is not allowed for Vanessa until a Super administrator has logged in first and cleared any other administrator sessions. 
D)  Authentication failed because Vanessa's username is not allowed in the new Threat Prevention console update checks even though these checks passed with Gaia. 
A)  Check Point R80 SmartConsole authentication is more secure than in previous versions and Vanessa requires a special authentication key for R80 SmartConsole. Check that the correct key details are used. 
B)  Check Point Management software authentication details are not automatically the same as the Operating System authentication details. Check that she is using the correct details. 
C)  SmartConsole Authentication is not allowed for Vanessa until a Super administrator has logged in first and cleared any other administrator sessions. 
D)  Authentication failed because Vanessa's username is not allowed in the new Threat Prevention console update checks even though these checks passed with Gaia.

Question 3

Anti-Spoofing is typically set up on which object type?

Accepted Answer

A)  Security Gateway 
B)  Host 
C)  Security Management object 
D)  Network 
A)  Security Gateway 
B)  Host 
C)  Security Management object 
D)  Network

Question 4

What licensing feature is used to verify licenses and activate new licenses added to the License and Contracts repository?

Accepted Answer

A)  Verification tool 
B)  Verification licensing 
C)  Automatic licensing 
D)  Automatic licensing and Verification tool 
A)  Verification tool 
B)  Verification licensing 
C)  Automatic licensing 
D)  Automatic licensing and Verification tool

Question 5

When configuring Anti-Spoofing, which tracking options can an Administrator select?

Accepted Answer

A)  Log, Send SNMP Trap, Email 
B)  Drop Packet, Alert, None 
C)  Log, Alert, None 
D)  Log, Allow Packets, Email 
A)  Log, Send SNMP Trap, Email 
B)  Drop Packet, Alert, None 
C)  Log, Alert, None 
D)  Log, Allow Packets, Email

Question 6

To view the policy installation history for each gateway, which tool would an administrator use?

Accepted Answer

A)  Revisions 
B)  Gateway installations 
C)  Installation history 
D)  Gateway history 
A)  Revisions 
B)  Gateway installations 
C)  Installation history 
D)  Gateway history

Question 7

Which of the following is NOT a component of Check Point Capsule?

Accepted Answer

A)  Capsule Docs 
B)  Capsule Cloud 
C)  Capsule Enterprise 
D)  Capsule Workspace 
A)  Capsule Docs 
B)  Capsule Cloud 
C)  Capsule Enterprise 
D)  Capsule Workspace

Question 8

Why would an administrator see the message below?

Accepted Answer

A)  A new Policy Package created on both the Management and Gateway will be deleted and must be backed up first before proceeding. 
B)  A new Policy Package created on the Management is going to be installed to the existing Gateway. 
C)  A new Policy Package created on the Gateway is going to be installed on the existing Management. 
D)  A new Policy Package created on the Gateway and transferred to the Management will be overwritten by the Policy Package currently on the Gateway but can be restored from a periodic backup on the Gateway. 
A)  A new Policy Package created on both the Management and Gateway will be deleted and must be backed up first before proceeding. 
B)  A new Policy Package created on the Management is going to be installed to the existing Gateway. 
C)  A new Policy Package created on the Gateway is going to be installed on the existing Management. 
D)  A new Policy Package created on the Gateway and transferred to the Management will be overwritten by the Policy Package currently on the Gateway but can be restored from a periodic backup on the Gateway.

Question 9

You are the senior Firewall administrator for ABC Corp., and have recently returned from a training course on Check Point's new advanced R80 management platform. You are presenting an in-house overview of the new features of Check Point R80 Management to the other administrators in ABC Corp.   How will you describe the new " Publish " button in R80 Management Console?

Accepted Answer

A)  The Publish button takes any changes an administrator has made in their management session, publishes a copy to the Check Point of R80, and then saves it to the R80 database. 
B)  The Publish button takes any changes an administrator has made in their management session and publishes a copy to the Check Point Cloud of R80 and but does not save it to the R80 
C)  The Publish button makes any changes an administrator has made in their management session visible to all other administrator sessions and saves it to the Database. 
D)  The Publish button makes any changes an administrator has made in their management session visible to the new Unified Policy session and saves it to the Database. 
A)  The Publish button takes any changes an administrator has made in their management session, publishes a copy to the Check Point of R80, and then saves it to the R80 database. 
B)  The Publish button takes any changes an administrator has made in their management session and publishes a copy to the Check Point Cloud of R80 and but does not save it to the R80 
C)  The Publish button makes any changes an administrator has made in their management session visible to all other administrator sessions and saves it to the Database. 
D)  The Publish button makes any changes an administrator has made in their management session visible to the new Unified Policy session and saves it to the Database.

Question 10

Identify the API that is not supported by Check Point currently.

Accepted Answer

A)  R80 Management API- 
B)  Identity Awareness Web Services API 
C)  Open REST API 
D)  OPSEC SDK 
A)  R80 Management API- 
B)  Identity Awareness Web Services API 
C)  Open REST API 
D)  OPSEC SDK

Question 11

Message digests use which of the following?

Accepted Answer

A)  DES and RC4 
B)  IDEA and RC4 
C)  SSL and MD4 
D)  SHA-1 and MD5 
A)  DES and RC4 
B)  IDEA and RC4 
C)  SSL and MD4 
D)  SHA-1 and MD5

Question 12

Which of the following is NOT a set of Regulatory Requirements related to Information Security?

Accepted Answer

A)  ISO 37001 
B)  Sarbanes Oxley (SOX) 
C)  HIPPA 
D)  PCI 
A)  ISO 37001 
B)  Sarbanes Oxley (SOX) 
C)  HIPPA 
D)  PCI

Question 13

Tina is a new administrator who is currently reviewing the new Check Point R80 Management console interface. In the Gateways view, she is reviewing the Summary screen as in the screenshot below. What as an 'Open Server'?

Accepted Answer

A)  Check Point software deployed on a non-Check Point appliance. 
B)  The Open Server Consortium approved Server Hardware used for the purpose of Security and Availability. 
C)  A check Point Management Server deployed using the Open Systems Interconnection (OSI) Server and Security deployment model. 
D)  A check Point Management Server software using the Open SSL. 
A)  Check Point software deployed on a non-Check Point appliance. 
B)  The Open Server Consortium approved Server Hardware used for the purpose of Security and Availability. 
C)  A check Point Management Server deployed using the Open Systems Interconnection (OSI) Server and Security deployment model. 
D)  A check Point Management Server software using the Open SSL.

Question 14

Which of the following technologies extracts detailed information from packets and stores that information in state tables?

Accepted Answer

A)  INSPECT Engine 
B)  Next-Generation Firewall 
C)  Packet Filtering 
D)  Application Layer Firewall 
A)  INSPECT Engine 
B)  Next-Generation Firewall 
C)  Packet Filtering 
D)  Application Layer Firewall

Question 15

A _________ VPN deployment is used to provide remote users with secure access to internal corporate resources by authenticating the user through an internet browser.

Accepted Answer

A)  Clientless remote access 
B)  Clientless direct access 
C)  Client-based remote access 
D)  Direct access 
A)  Clientless remote access 
B)  Clientless direct access 
C)  Client-based remote access 
D)  Direct access

Question 16

You want to store the GAiA configuration in a file for later reference. What command should you use?

Accepted Answer

A) write mem B) show config -f C) save config -o D) save configuration A) write mem B) show config -f C) save config -o D) save configuration

Question 17

The R80 SmartConsole, SmartEvent GUI client, and _______ consolidate billions of logs and shows them as prioritized security events.

Accepted Answer

A)  SmartMonitor 
B)  SmartView Web Application 
C)  SmartReporter 
D)  SmartTracker 
A)  SmartMonitor 
B)  SmartView Web Application 
C)  SmartReporter 
D)  SmartTracker

Question 18

The fw monitor utility is used to troubleshoot which of the following problems?

Accepted Answer

A)  Phase two key negotiation 
B)  Address translation 
C)  Log Consolidation Engine 
D)  User data base corruption 
A)  Phase two key negotiation 
B)  Address translation 
C)  Log Consolidation Engine 
D)  User data base corruption

Question 19

Which default Gaia user has full read/write access?

Accepted Answer

A)  Monitor 
B)  Altuser 
C)  Administrator 
D)  Superuser 
A)  Monitor 
B)  Altuser 
C)  Administrator 
D)  Superuser

Question 20

Which of the following is used to enforce changes made to a Rule Base?

Accepted Answer

A)  Publish database 
B)  Save changes 
C)  Install policy 
D)  Activate policy 
A)  Publish database 
B)  Save changes 
C)  Install policy 
D)  Activate policy

Which of the following is NOT a license activation method?

Anti-Spoofing is typically set up on which object type?

What licensing feature is used to verify licenses and activate new licenses added to the License and Contracts repository?

When configuring Anti-Spoofing, which tracking options can an Administrator select?

To view the policy installation history for each gateway, which tool would an administrator use?

Which of the following is NOT a component of Check Point Capsule?

Why would an administrator see the message below?

Identify the API that is not supported by Check Point currently.

Message digests use which of the following?

Which of the following is NOT a set of Regulatory Requirements related to Information Security?

Tina is a new administrator who is currently reviewing the new Check Point R80 Management console interface. In the Gateways view, she is reviewing the Summary screen as in the screenshot below. What as an 'Open Server'?

Which of the following technologies extracts detailed information from packets and stores that information in state tables?

A _________ VPN deployment is used to provide remote users with secure access to internal corporate resources by authenticating the user through an internet browser.

You want to store the GAiA configuration in a file for later reference. What command should you use?

The R80 SmartConsole, SmartEvent GUI client, and _______ consolidate billions of logs and shows them as prioritized security events.

The fw monitor utility is used to troubleshoot which of the following problems?

Which default Gaia user has full read/write access?

Which of the following is used to enforce changes made to a Rule Base?

Check Point Certified Security Principles Associate (CCSPA)

Check Point Certified Security Expert - R80

Filters

Exam 2: Check Point Certified Security Administrator (CCSA R80)

Which of the following is NOT a license activation method?

Anti-Spoofing is typically set up on which object type?

What licensing feature is used to verify licenses and activate new licenses added to the License and Contracts repository?

When configuring Anti-Spoofing, which tracking options can an Administrator select?

To view the policy installation history for each gateway, which tool would an administrator use?

Which of the following is NOT a component of Check Point Capsule?

Why would an administrator see the message below?

Identify the API that is not supported by Check Point currently.

Message digests use which of the following?

Which of the following is NOT a set of Regulatory Requirements related to Information Security?

Tina is a new administrator who is currently reviewing the new Check Point R80 Management console interface. In the Gateways view, she is reviewing the Summary screen as in the screenshot below. What as an 'Open Server'?

Which of the following technologies extracts detailed information from packets and stores that information in state tables?

A _________ VPN deployment is used to provide remote users with secure access to internal corporate resources by authenticating the user through an internet browser.

You want to store the GAiA configuration in a file for later reference. What command should you use?

The R80 SmartConsole, SmartEvent GUI client, and _______ consolidate billions of logs and shows them as prioritized security events.

The fw monitor utility is used to troubleshoot which of the following problems?

Which default Gaia user has full read/write access?

Which of the following is used to enforce changes made to a Rule Base?

Check Point Certified Security Principles Associate (CCSPA)

Check Point Certified Security Expert - R80

Filters