Question 1

True or False: In a Distributed Environment, a Central License can be installed via CLI on a Security Gateway

Accepted Answer

A)  True, CLI is the prefer method for Licensing 
B)  False, Central License are handled via Security Management Server 
C)  False, Central License are installed via Gaia on Security Gateways 
D)  True, Central License can be installed with CPLIC command on a Security Gateway 
A)  True, CLI is the prefer method for Licensing 
B)  False, Central License are handled via Security Management Server 
C)  False, Central License are installed via Gaia on Security Gateways 
D)  True, Central License can be installed with CPLIC command on a Security Gateway

Question 2

What is the purpose of the Clean-up Rule?

Accepted Answer

A)  To log all traffic that is not explicitly allowed or denied in the Rule Base 
B)  To clean up policies found inconsistent with the compliance blade reports 
C)  To remove all rules that could have a conflict with other rules in the database 
D)  To eliminate duplicate log entries in the Security Gateway 
A)  To log all traffic that is not explicitly allowed or denied in the Rule Base 
B)  To clean up policies found inconsistent with the compliance blade reports 
C)  To remove all rules that could have a conflict with other rules in the database 
D)  To eliminate duplicate log entries in the Security Gateway

Question 3

Fill in the blank: Authentication rules are defined for ____________.

Accepted Answer

A)  User groups 
B)  Users using UserCheck 
C)  Individual users 
D)  All users in the database 
A)  User groups 
B)  Users using UserCheck 
C)  Individual users 
D)  All users in the database

Question 4

Kofi, the administrator of the ALPHA Corp network wishes to change the default Gaia WebUI Portal port number currently set on the default HTTPS port. Which CLISH commands are required to be able to change this TCP port?

Accepted Answer

A) set web ssl-port B) set Gaia-portal port C) set Gaia-portal https-port D) set web https-port A) set web ssl-port B) set Gaia-portal port C) set Gaia-portal https-port D) set web https-port

Question 5

What is a reason for manual creation of a NAT rule?

Accepted Answer

A)  In R80 all Network Address Translation is done automatically and there is no need for manually defined NAT-rules. 
B)  Network Address Translation of RFC1918-compliant networks is needed to access the Internet. 
C)  Network Address Translation is desired for some services, but not for others. 
D)  The public IP-address is different from the gateway's external IP 
A)  In R80 all Network Address Translation is done automatically and there is no need for manually defined NAT-rules. 
B)  Network Address Translation of RFC1918-compliant networks is needed to access the Internet. 
C)  Network Address Translation is desired for some services, but not for others. 
D)  The public IP-address is different from the gateway's external IP

Question 6

Your users are defined in a Windows 2008 R2 Active Directory server. You must add LDAP users to a Client Authentication rule. Which kind of user group do you need in the Client Authentication rule in R77?

Accepted Answer

A)  External-user group 
B)  LDAP group 
C)  A group with a genetic user 
D)  All Users 
A)  External-user group 
B)  LDAP group 
C)  A group with a genetic user 
D)  All Users

Question 7

Fill in the blank: The __________ is used to obtain identification and security information about network users.

Accepted Answer

A)  User Directory 
B)  User server 
C)  UserCheck 
D)  User index 
A)  User Directory 
B)  User server 
C)  UserCheck 
D)  User index

Question 8

Administrator Dave logs into R80 Management Server to review and makes some rule changes. He notices that there is a padlock sign next to the DNS rule in the Rule Base.   What is the possible explanation for this?

Accepted Answer

A)  DNS Rule is using one of the new feature of R80 where an administrator can mark a rule with the padlock icon to let other administrators know it is important. 
B)  Another administrator is logged into the Management and currently editing the DNS Rule. 
C)  DNS Rule is a placeholder rule for a rule that existed in the past but was deleted. 
D)  This is normal behavior in R80 when there are duplicate rules in the Rule Base. 
A)  DNS Rule is using one of the new feature of R80 where an administrator can mark a rule with the padlock icon to let other administrators know it is important. 
B)  Another administrator is logged into the Management and currently editing the DNS Rule. 
C)  DNS Rule is a placeholder rule for a rule that existed in the past but was deleted. 
D)  This is normal behavior in R80 when there are duplicate rules in the Rule Base.

Question 9

What are the three authentication methods for SIC?

Accepted Answer

A)  Passwords, Users, and standards-based SSL for the creation of secure channels 
B)  Certificates, standards-based SSL for the creation of secure channels, and 3DES or AES128 for encryption 
C)  Packet Filtering, certificates, and 3DES or AES128 for encryption 
D)  Certificates, Passwords, and Tokens 
A)  Passwords, Users, and standards-based SSL for the creation of secure channels 
B)  Certificates, standards-based SSL for the creation of secure channels, and 3DES or AES128 for encryption 
C)  Packet Filtering, certificates, and 3DES or AES128 for encryption 
D)  Certificates, Passwords, and Tokens

Question 10

You have discovered suspicious activity in your network. What is the BEST immediate action to take?

Accepted Answer

A)  Create a new policy rule to block the traffic. 
B)  Create a Suspicious Activity Monitoring (SAM) rule to block that traffic. 
C)  Wait until traffic has been identified before making any changes. 
D)  Contact your ISP to request them to block the traffic. 
A)  Create a new policy rule to block the traffic. 
B)  Create a Suspicious Activity Monitoring (SAM) rule to block that traffic. 
C)  Wait until traffic has been identified before making any changes. 
D)  Contact your ISP to request them to block the traffic.

Question 11

What is NOT an advantage of Packet Filtering?

Accepted Answer

A)  Low Security and No Screening above Network Layer 
B)  Application Independence 
C)  High Performance 
D)  Scalability 
A)  Low Security and No Screening above Network Layer 
B)  Application Independence 
C)  High Performance 
D)  Scalability

Question 12

You are unable to login to SmartConsole. You login to the management server and run #cpwd_admin list with the following output:   What reason could possibly BEST explain why you are unable to connect to SmartConsole?

Accepted Answer

A)  CPD is down 
B)  SVR is down 
C)  CPM and FWM are down 
D)  CPSM is down 
A)  CPD is down 
B)  SVR is down 
C)  CPM and FWM are down 
D)  CPSM is down

Question 13

The destination server for Security Gateway logs depends on a Security Management Server configuration.

Accepted Answer

A)  False, log servers are configured on the Log Server General Properties 
B)  True, all Security Gateways will only forward logs with a SmartCenter Server configuration 
C)  True, all Security Gateways forward logs automatically to the Security Management Server 
D)  False, log servers are enabled on the Security Gateway General Properties 
A)  False, log servers are configured on the Log Server General Properties 
B)  True, all Security Gateways will only forward logs with a SmartCenter Server configuration 
C)  True, all Security Gateways forward logs automatically to the Security Management Server 
D)  False, log servers are enabled on the Security Gateway General Properties

Question 14

Fill in the blank: The IPS policy for pre-R80 gateways is installed during the _______ .

Accepted Answer

A)  Firewall policy install 
B)  Threat Prevention policy install 
C)  Anti-bot policy install 
D)  Access Control policy install 
A)  Firewall policy install 
B)  Threat Prevention policy install 
C)  Anti-bot policy install 
D)  Access Control policy install

Question 15

AdminA and AdminB are both logged in on SmartConsole. What does it mean if AdminB sees a locked icon on a rule?

Accepted Answer

A)  Rule is locked by AdminA, because the save bottom has not been press. 
B)  Rule is locked by AdminA, because an object on that rule is been edited. 
C)  Rule is locked by AdminA, and will make it available if session is published. 
D)  Rule is locked by AdminA, and if the session is saved, rule will be available 
A)  Rule is locked by AdminA, because the save bottom has not been press. 
B)  Rule is locked by AdminA, because an object on that rule is been edited. 
C)  Rule is locked by AdminA, and will make it available if session is published. 
D)  Rule is locked by AdminA, and if the session is saved, rule will be available

Question 16

MyCorp has the following NAT rules. You need to disable the NAT function when Alpha-internal networks try to reach the Google DNS (8.8.8.8) server. What can you do in this case?

Accepted Answer

A)  Use manual NAT rule to make an exception 
B)  Use the NAT settings in the Global Properties 
C)  Disable NAT inside the VPN community 
D)  Use network exception in the Alpha-internal network object 
A)  Use manual NAT rule to make an exception 
B)  Use the NAT settings in the Global Properties 
C)  Disable NAT inside the VPN community 
D)  Use network exception in the Alpha-internal network object

Question 17

Which GUI tool can be used to view and apply Check Point licenses?

Accepted Answer

A)  cpconfig 
B)  Management Command Line 
C)  SmartConsole 
D)  SmartUpdate 
A)  cpconfig 
B)  Management Command Line 
C)  SmartConsole 
D)  SmartUpdate

Question 18

What is the purpose of Captive Portal?

Accepted Answer

A)  It provides remote access to SmartConsole 
B)  It manages user permission in SmartConsole 
C)  It authenticates users, allowing them access to the Internet and corporate resources 
D)  It authenticates users, allowing them access to the Gaia OS 
A)  It provides remote access to SmartConsole 
B)  It manages user permission in SmartConsole 
C)  It authenticates users, allowing them access to the Internet and corporate resources 
D)  It authenticates users, allowing them access to the Gaia OS

Question 19

Which of the following methods can be used to update the trusted log server regarding the policy and configuration changes performed on the Security Management Server?

Accepted Answer

A)  Save Policy 
B)  Install Database 
C)  Save session 
D)  Install Policy 
A)  Save Policy 
B)  Install Database 
C)  Save session 
D)  Install Policy

Question 20

What is the SOLR database for?

Accepted Answer

A)  Used for full text search and enables powerful matching capabilities 
B)  Writes data to the database and full text search 
C)  Serves GUI responsible to transfer request to the DLE server 
D)  Enables powerful matching capabilities and writes data to the database 
A)  Used for full text search and enables powerful matching capabilities 
B)  Writes data to the database and full text search 
C)  Serves GUI responsible to transfer request to the DLE server 
D)  Enables powerful matching capabilities and writes data to the database

True or False: In a Distributed Environment, a Central License can be installed via CLI on a Security Gateway

What is the purpose of the Clean-up Rule?

Fill in the blank: Authentication rules are defined for ____________.

Kofi, the administrator of the ALPHA Corp network wishes to change the default Gaia WebUI Portal port number currently set on the default HTTPS port. Which CLISH commands are required to be able to change this TCP port?

What is a reason for manual creation of a NAT rule?

Your users are defined in a Windows 2008 R2 Active Directory server. You must add LDAP users to a Client Authentication rule. Which kind of user group do you need in the Client Authentication rule in R77?

Fill in the blank: The __________ is used to obtain identification and security information about network users.

Administrator Dave logs into R80 Management Server to review and makes some rule changes. He notices that there is a padlock sign next to the DNS rule in the Rule Base. What is the possible explanation for this?

What are the three authentication methods for SIC?

You have discovered suspicious activity in your network. What is the BEST immediate action to take?

What is NOT an advantage of Packet Filtering?

You are unable to login to SmartConsole. You login to the management server and run #cpwd_admin list with the following output: What reason could possibly BEST explain why you are unable to connect to SmartConsole?

The destination server for Security Gateway logs depends on a Security Management Server configuration.

Fill in the blank: The IPS policy for pre-R80 gateways is installed during the _______ .

AdminA and AdminB are both logged in on SmartConsole. What does it mean if AdminB sees a locked icon on a rule?

MyCorp has the following NAT rules. You need to disable the NAT function when Alpha-internal networks try to reach the Google DNS (8.8.8.8) server. What can you do in this case?

Which GUI tool can be used to view and apply Check Point licenses?

What is the purpose of Captive Portal?

Which of the following methods can be used to update the trusted log server regarding the policy and configuration changes performed on the Security Management Server?

What is the SOLR database for?

Check Point Certified Security Principles Associate (CCSPA)

Check Point Certified Security Expert - R80

Filters

Exam 2: Check Point Certified Security Administrator (CCSA R80)

True or False: In a Distributed Environment, a Central License can be installed via CLI on a Security Gateway

What is the purpose of the Clean-up Rule?

Fill in the blank: Authentication rules are defined for ____________.

Kofi, the administrator of the ALPHA Corp network wishes to change the default Gaia WebUI Portal port number currently set on the default HTTPS port. Which CLISH commands are required to be able to change this TCP port?

What is a reason for manual creation of a NAT rule?

Your users are defined in a Windows 2008 R2 Active Directory server. You must add LDAP users to a Client Authentication rule. Which kind of user group do you need in the Client Authentication rule in R77?

Fill in the blank: The __________ is used to obtain identification and security information about network users.

Administrator Dave logs into R80 Management Server to review and makes some rule changes. He notices that there is a padlock sign next to the DNS rule in the Rule Base. What is the possible explanation for this?

What are the three authentication methods for SIC?

You have discovered suspicious activity in your network. What is the BEST immediate action to take?

What is NOT an advantage of Packet Filtering?

You are unable to login to SmartConsole. You login to the management server and run #cpwd_admin list with the following output: What reason could possibly BEST explain why you are unable to connect to SmartConsole?

The destination server for Security Gateway logs depends on a Security Management Server configuration.

Fill in the blank: The IPS policy for pre-R80 gateways is installed during the _______ .

AdminA and AdminB are both logged in on SmartConsole. What does it mean if AdminB sees a locked icon on a rule?

MyCorp has the following NAT rules. You need to disable the NAT function when Alpha-internal networks try to reach the Google DNS (8.8.8.8) server. What can you do in this case?

Which GUI tool can be used to view and apply Check Point licenses?

What is the purpose of Captive Portal?

Which of the following methods can be used to update the trusted log server regarding the policy and configuration changes performed on the Security Management Server?

What is the SOLR database for?

Check Point Certified Security Principles Associate (CCSPA)

Check Point Certified Security Expert - R80

Filters