Question 1

What is a role of Publishing?

Accepted Answer

A)  The Publish operation sends the modifications made via SmartConsole in the private session and makes them public 
B)  The Security Management Server installs the updated policy and the entire database on Security Gateways 
C)  The Security Management Server installs the updated session and the entire Rule Base on Security Gateways 
D)  Modifies network objects, such as servers, users, services, or IPS profiles, but not the Rule Base 
A)  The Publish operation sends the modifications made via SmartConsole in the private session and makes them public 
B)  The Security Management Server installs the updated policy and the entire database on Security Gateways 
C)  The Security Management Server installs the updated session and the entire Rule Base on Security Gateways 
D)  Modifies network objects, such as servers, users, services, or IPS profiles, but not the Rule Base

Question 2

Which is a suitable command to check whether Drop Templates are activated or not?

Accepted Answer

A)  fw ctl get int activate_drop_templates 
B)  fwaccel stat 
C)  fwaccel stats 
D)  fw ctl templates -d 
A)  fw ctl get int activate_drop_templates 
B)  fwaccel stat 
C)  fwaccel stats 
D)  fw ctl templates -d

Question 3

MegaCorp's security infrastructure separates Security Gateways geographically. You must request a central license for one remote Security Gateway. How do you apply the license?

Accepted Answer

A)  Using the remote Gateway's IP address, and attaching the license to the remote Gateway via SmartUpdate. 
B)  Using your Security Management Server's IP address, and attaching the license to the remote Gateway via SmartUpdate. 
C)  Using the remote Gateway's IP address, and applying the license locally with command cplic put . Using the remote Gateway's IP address, and applying the license locally with command cplic put . 
D)  Using each of the Gateway's IP addresses, and applying the licenses on the Security Management Server with the command cprlic put . Using each of the Gateway's IP addresses, and applying the licenses on the Security Management Server with the command cprlic put 
A)  Using the remote Gateway's IP address, and attaching the license to the remote Gateway via SmartUpdate. 
B)  Using your Security Management Server's IP address, and attaching the license to the remote Gateway via SmartUpdate. 
C)  Using the remote Gateway's IP address, and applying the license locally with command cplic put . Using the remote Gateway's IP address, and applying the license locally with command cplic put . 
D)  Using each of the Gateway's IP addresses, and applying the licenses on the Security Management Server with the command cprlic put . Using each of the Gateway's IP addresses, and applying the licenses on the Security Management Server with the command cprlic put

Question 4

When a packet arrives at the gateway, the gateway checks it against the rules in the top Policy Layer, sequentially from top to bottom, and enforces the first rule that matches a packet. Which of the following statements about the order of rule enforcement is true?

Accepted Answer

A)  If the Action is Accept, the gateway allows the packet to pass through the gateway. 
B)  If the Action is Drop, the gateway continues to check rules in the next Policy Layer down. 
C)  If the Action is Accept, the gateway continues to check rules in the next Policy Layer down. 
D)  If the Action is Drop, the gateway applies the Implicit Clean-up Rule for that Policy Layer. 
A)  If the Action is Accept, the gateway allows the packet to pass through the gateway. 
B)  If the Action is Drop, the gateway continues to check rules in the next Policy Layer down. 
C)  If the Action is Accept, the gateway continues to check rules in the next Policy Layer down. 
D)  If the Action is Drop, the gateway applies the Implicit Clean-up Rule for that Policy Layer.

Question 5

What is NOT an advantage of Stateful Inspection?

Accepted Answer

A)  High Performance 
B)  Good Security 
C)  No Screening above Network layer 
D)  Transparency 
A)  High Performance 
B)  Good Security 
C)  No Screening above Network layer 
D)  Transparency

Question 6

A security Policy is created in _________ , stored in the _________ , and Distributed to the various __________ .

Accepted Answer

A)  Rule base, Security Management Server, Security Gateways 
B)  SmartConsole, Security Gateway, Security Management Servers 
C)  SmartConsole, Security Management Server, Security Gateways 
D)  The Check Point database, SmartConsole, Security Gateways 
A)  Rule base, Security Management Server, Security Gateways 
B)  SmartConsole, Security Gateway, Security Management Servers 
C)  SmartConsole, Security Management Server, Security Gateways 
D)  The Check Point database, SmartConsole, Security Gateways

Question 7

From the Gaia web interface, which of the following operations CANNOT be performed on a Security Management Server?

Accepted Answer

A)  Verify a Security Policy 
B)  Open a terminal shell 
C)  Add a static route 
D)  View Security Management GUI Clients 
A)  Verify a Security Policy 
B)  Open a terminal shell 
C)  Add a static route 
D)  View Security Management GUI Clients

Question 8

Which statement describes what Identity Sharing is in Identity Awareness?

Accepted Answer

A)  Management servers can acquire and share identities with Security Gateways 
B)  Users can share identities with other users 
C)  Security Gateways can acquire and share identities with other Security Gateways 
D)  Administrators can share identities with other administrators 
A)  Management servers can acquire and share identities with Security Gateways 
B)  Users can share identities with other users 
C)  Security Gateways can acquire and share identities with other Security Gateways 
D)  Administrators can share identities with other administrators

Question 9

Mesh and Star are two types of VPN topologies. Which statement below is TRUE about these types of communities?

Accepted Answer

A)  A star community requires Check Point gateways, as it is a Check Point proprietary technology. 
B)  In a star community, satellite gateways cannot communicate with each other. 
C)  In a mesh community, member gateways cannot communicate directly with each other. 
D)  In a mesh community, all members can create a tunnel with any other member. 
A)  A star community requires Check Point gateways, as it is a Check Point proprietary technology. 
B)  In a star community, satellite gateways cannot communicate with each other. 
C)  In a mesh community, member gateways cannot communicate directly with each other. 
D)  In a mesh community, all members can create a tunnel with any other member.

Question 10

Choose what BEST describes the reason why querying logs now is very fast.

Accepted Answer

A)  New Smart-1 appliances double the physical memory install 
B)  Indexing Engine indexes logs for faster search results 
C)  SmartConsole now queries results directly from the Security Gateway 
D)  The amount of logs being stored is less than the usual in older versions 
A)  New Smart-1 appliances double the physical memory install 
B)  Indexing Engine indexes logs for faster search results 
C)  SmartConsole now queries results directly from the Security Gateway 
D)  The amount of logs being stored is less than the usual in older versions

Question 11

R80 SmartConsole is supported by which of the following operating systems:

Accepted Answer

A)  Windows only 
B)  Gaia only 
C)  Gaia, SecurePlatform, and Windows 
D)  SecurePlatform only 
A)  Windows only 
B)  Gaia only 
C)  Gaia, SecurePlatform, and Windows 
D)  SecurePlatform only

Question 12

Which command is used to obtain the configuration lock in Gaia?

Accepted Answer

A)  Lock database override 
B)  Unlock database override 
C)  Unlock database lock 
D)  Lock database user 
A)  Lock database override 
B)  Unlock database override 
C)  Unlock database lock 
D)  Lock database user

Question 13

Which of these statements describes the Check Point ThreatCloud?

Accepted Answer

A)  Blocks or limits usage of web applications 
B)  Prevents or controls access to web sites based on category 
C)  Prevents Cloud vulnerability exploits 
D)  A worldwide collaborative security network 
A)  Blocks or limits usage of web applications 
B)  Prevents or controls access to web sites based on category 
C)  Prevents Cloud vulnerability exploits 
D)  A worldwide collaborative security network

Question 14

Fill in the blank: In Security Gateways R75 and above, SIC uses ______________ for encryption.

Accepted Answer

A)  AES-128 
B)  AES-256 
C)  DES 
D)  3DES 
A)  AES-128 
B)  AES-256 
C)  DES 
D)  3DES

Question 15

What are the steps to configure the HTTPS Inspection Policy?

Accepted Answer

A)  Go to Manage&Settings > Blades > HTTPS Inspection > Configure in SmartDashboard 
B)  Go to Application&url filtering blade > Advanced > Https Inspection > Policy 
C)  Go to Manage&Settings > Blades > HTTPS Inspection > Policy 
D)  Go to Application&url filtering blade > Https Inspection > Policy 
A)  Go to Manage&Settings > Blades > HTTPS Inspection > Configure in SmartDashboard 
B)  Go to Application&url filtering blade > Advanced > Https Inspection > Policy 
C)  Go to Manage&Settings > Blades > HTTPS Inspection > Policy 
D)  Go to Application&url filtering blade > Https Inspection > Policy

Question 16

Which icon indicates that read/write access is enabled?

Accepted Answer

A)  Pencil 
B)  Padlock 
C)  Book 
D)  Eyeglasses 
A)  Pencil 
B)  Padlock 
C)  Book 
D)  Eyeglasses

Question 17

What is UserCheck?

Accepted Answer

A)  Messaging tool used to verify a user's credentials 
B)  Communication tool used to inform a user about a website or application they are trying to access 
C)  Administrator tool used to monitor users on their network 
D)  Communication tool used to notify an administrator when a new user is created 
A)  Messaging tool used to verify a user's credentials 
B)  Communication tool used to inform a user about a website or application they are trying to access 
C)  Administrator tool used to monitor users on their network 
D)  Communication tool used to notify an administrator when a new user is created

Question 18

Which of the following commands is used to monitor cluster members?

Accepted Answer

A)  cphaprob state 
B)  cphaprob status 
C)  cphaprob 
D)  cluster state 
A)  cphaprob state 
B)  cphaprob status 
C)  cphaprob 
D)  cluster state

Question 19

To fully enable Dynamic Dispatcher on a Security Gateway:

Accepted Answer

A)  run fw ctl multik set_mode 9 in Expert mode and then reboot 
B)  Using cpconfig, update the Dynamic Dispatcher value to "full" under the CoreXL menu 
C)  Edit /proc/interrupts to include multik set_mode 1 at the bottom of the file, save, and reboot 
D)  run fw ctl multik set_mode 1 in Expert mode and then reboot 
A)  run fw ctl multik set_mode 9 in Expert mode and then reboot 
B)  Using cpconfig, update the Dynamic Dispatcher value to "full" under the CoreXL menu 
C)  Edit /proc/interrupts to include multik set_mode 1 at the bottom of the file, save, and reboot 
D)  run fw ctl multik set_mode 1 in Expert mode and then reboot

Question 20

At what point is the Internal Certificate Authority (ICA) created?

Accepted Answer

A)  Upon creation of a certificate 
B)  During the primary Security Management Server installation process. 
C)  When an administrator decides to create one. 
D)  When an administrator initially logs into SmartConsole. 
A)  Upon creation of a certificate 
B)  During the primary Security Management Server installation process. 
C)  When an administrator decides to create one. 
D)  When an administrator initially logs into SmartConsole.

What is a role of Publishing?

Which is a suitable command to check whether Drop Templates are activated or not?

MegaCorp's security infrastructure separates Security Gateways geographically. You must request a central license for one remote Security Gateway. How do you apply the license?

When a packet arrives at the gateway, the gateway checks it against the rules in the top Policy Layer, sequentially from top to bottom, and enforces the first rule that matches a packet. Which of the following statements about the order of rule enforcement is true?

What is NOT an advantage of Stateful Inspection?

A security Policy is created in _____ , stored in the _ , and Distributed to the various ______ .

From the Gaia web interface, which of the following operations CANNOT be performed on a Security Management Server?

Which statement describes what Identity Sharing is in Identity Awareness?

Mesh and Star are two types of VPN topologies. Which statement below is TRUE about these types of communities?

Choose what BEST describes the reason why querying logs now is very fast.

R80 SmartConsole is supported by which of the following operating systems:

Which command is used to obtain the configuration lock in Gaia?

Which of these statements describes the Check Point ThreatCloud?

Fill in the blank: In Security Gateways R75 and above, SIC uses ______________ for encryption.

What are the steps to configure the HTTPS Inspection Policy?

Which icon indicates that read/write access is enabled?

What is UserCheck?

Which of the following commands is used to monitor cluster members?

To fully enable Dynamic Dispatcher on a Security Gateway:

At what point is the Internal Certificate Authority (ICA) created?

Check Point Certified Security Principles Associate (CCSPA)

Check Point Certified Security Expert - R80

Filters

Exam 2: Check Point Certified Security Administrator (CCSA R80)

What is a role of Publishing?

Which is a suitable command to check whether Drop Templates are activated or not?

MegaCorp's security infrastructure separates Security Gateways geographically. You must request a central license for one remote Security Gateway. How do you apply the license?

When a packet arrives at the gateway, the gateway checks it against the rules in the top Policy Layer, sequentially from top to bottom, and enforces the first rule that matches a packet. Which of the following statements about the order of rule enforcement is true?

What is NOT an advantage of Stateful Inspection?

A security Policy is created in _________ , stored in the _________ , and Distributed to the various __________ .

From the Gaia web interface, which of the following operations CANNOT be performed on a Security Management Server?

Which statement describes what Identity Sharing is in Identity Awareness?

Mesh and Star are two types of VPN topologies. Which statement below is TRUE about these types of communities?

Choose what BEST describes the reason why querying logs now is very fast.

R80 SmartConsole is supported by which of the following operating systems:

Which command is used to obtain the configuration lock in Gaia?

Which of these statements describes the Check Point ThreatCloud?

Fill in the blank: In Security Gateways R75 and above, SIC uses ______________ for encryption.

What are the steps to configure the HTTPS Inspection Policy?

Which icon indicates that read/write access is enabled?

What is UserCheck?

Which of the following commands is used to monitor cluster members?

To fully enable Dynamic Dispatcher on a Security Gateway:

At what point is the Internal Certificate Authority (ICA) created?

Check Point Certified Security Principles Associate (CCSPA)

Check Point Certified Security Expert - R80

Filters

A security Policy is created in _____ , stored in the _ , and Distributed to the various ______ .