Exam 2: Check Point Certified Security Administrator (CCSA R80)

Fill in the blanks: There are ________ types of software containers ________.

RADIUS Accounting gets ______ data from requests generated by the accounting client

Fill in the blank: When tunnel test packets no longer invoke a response, SmartView Monitor displays _____________ for the given VPN tunnel.

Can a Check Point gateway translate both source IP address and destination IP address in a given packet?

When defining group-based access in an LDAP environment with Identity Awareness, what is the BEST object type to represent an LDAP group in a Security Policy?

Identity Awareness allows the Security Administrator to configure network access based on which of the following?

When logging in for the first time to a Security management Server through SmartConsole, a fingerprint is saved to the:

What needs to be configured if the NAT property 'Translate destination on client side' is not enabled in Global properties?

Which of the following is NOT a method used by Identity Awareness for acquiring identity?

A(n) _____ rule is created by an administrator and is located before the first and before last rules in the Rule Base.

You have configured SNX on the Security Gateway. The client connects to the Security Gateway and the user enters the authentication credentials. What must happen after authentication that allows the client to connect to the Security Gateway's VPN domain?

Which product correlates logs and detects security threats, providing a centralized display of potential attack patterns from all network devices?

Which is NOT an encryption algorithm that can be used in an IPSEC Security Association (Phase 2)?

You work as a security administrator for a large company. CSO of your company has attended a security conference where he has learnt how hackers constantly modify their strategies and techniques to evade detection and reach corporate resources. He wants to make sure that his company has the right protections in place. Check Point has been selected for the security vendor. Which Check Point products protects BEST against malware and zero-day attacks while ensuring quick delivery of safe content to your users?

A new license should be generated and installed in all of the following situations EXCEPT when ________ .

View the rule below. What does the pen-symbol in the left column mean?

Phase 1 of the two-phase negotiation process conducted by IKE operates in ______ mode.

Two administrators Dave and Jon both manage R80 Management as administrators for ABC Corp. Jon logged into the R80 Management and then shortly after Dave logged in to the same server. They are both in the Security Policies view. From the screenshots below, why does Dave not have the rule no.6 in his SmartConsole view even though Jon has it his in his SmartConsole view?

Which utility allows you to configure the DHCP service on GAIA from the command line?

Which of the following is NOT a component of a Distinguished Name?