Question 1

Which is NOT an encryption algorithm that can be used in an IPSEC Security Association (Phase 2)?

Accepted Answer

A)  AES-GCM-256 
B)  AES-CBC-256 
C)  AES-GCM-128 
A)  AES-GCM-256 
B)  AES-CBC-256 
C)  AES-GCM-128

Question 2

Fill in the blank: ________information is included in the "Full Log" tracking option, but is not included in the "Log" tracking option?

Accepted Answer

A)  file attributes 
B)  application 
C)  destination port 
D)  data type 
A)  file attributes 
B)  application 
C)  destination port 
D)  data type

Question 3

There are 4 ways to use the Management API for creating host object with R80 Management API. Which one is NOT correct?

Accepted Answer

A)  Using Web Services 
B)  Using Mgmt_cli tool 
C)  Using CLISH 
D)  Using SmartConsole GUI console 
A)  Using Web Services 
B)  Using Mgmt_cli tool 
C)  Using CLISH 
D)  Using SmartConsole GUI console

Question 4

Which application should you use to install a contract file?

Accepted Answer

A)  SmartView Monitor 
B)  WebUI 
C)  SmartUpdate 
D)  SmartProvisioning 
A)  SmartView Monitor 
B)  WebUI 
C)  SmartUpdate 
D)  SmartProvisioning

Question 5

The "Hit count" feature allows tracking the number of connections that each rule matches. Will the Hit count feature work independently from logging and Track the hits even if the Track option is set to "None"?

Accepted Answer

A)  No, it will not work independently. Hit Count will be shown only for rules with Track options set as Log or alert 
B)  Yes, it will work independently as long as "analyze all rules" tick box is enabled on the Security Gateway 
C)  No, it will not work independently because hit count requires all rules to be logged 
D)  Yes, it will work independently because when you enable Hit Count, the SMS collects the data from supported Security Gateways 
A)  No, it will not work independently. Hit Count will be shown only for rules with Track options set as Log or alert 
B)  Yes, it will work independently as long as "analyze all rules" tick box is enabled on the Security Gateway 
C)  No, it will not work independently because hit count requires all rules to be logged 
D)  Yes, it will work independently because when you enable Hit Count, the SMS collects the data from supported Security Gateways

Question 6

Which options are given on features, when editing a Role on Gaia Platform?

Accepted Answer

A)  Read/Write, Read Only 
B)  Read/Write, Read only, None 
C)  Read/Write, None 
D)  Read Only, None 
A)  Read/Write, Read Only 
B)  Read/Write, Read only, None 
C)  Read/Write, None 
D)  Read Only, None

Question 7

What is also referred to as Dynamic NAT ?

Accepted Answer

A)  Automatic NAT 
B)  Static NAT 
C)  Manual NAT 
D)  Hide NAT 
A)  Automatic NAT 
B)  Static NAT 
C)  Manual NAT 
D)  Hide NAT

Question 8

When configuring LDAP User Directory integration, changes applied to a User Directory template are:

Accepted Answer

A)  Reflected immediately for all users who are using that template. 
B)  Not reflected for any users unless the local user template is changed. 
C)  Reflected for all users who are using that template and if the local user template is changed as well. 
D)  Not reflected for any users who are using that template. 
A)  Reflected immediately for all users who are using that template. 
B)  Not reflected for any users unless the local user template is changed. 
C)  Reflected for all users who are using that template and if the local user template is changed as well. 
D)  Not reflected for any users who are using that template.

Question 9

Which command is used to add users to or from existing roles?

Accepted Answer

A) Add rba user roles B) Add rba user C) Add user roles D) Add user A) Add rba user roles B) Add rba user C) Add user roles D) Add user

Question 10

Which type of Check Point license is tied to the IP address of a specific Security Gateway and cannot be transferred to a gateway that has a different IP address?

Accepted Answer

A)  Central 
B)  Corporate 
C)  Formal 
D)  Local 
A)  Central 
B)  Corporate 
C)  Formal 
D)  Local

Question 11

What is the most complete definition of the difference between the Install Policy button on the SmartConsole's tab, and the Install Policy within a specific policy?

Accepted Answer

A)  The Global one also saves and published the session before installation. 
B)  The Global one can install multiple selected policies at the same time. 
C)  The local one does not install the Anti-Malware policy along with the Network policy. 
D)  The second one pre-select the installation for only the current policy and for the applicable gateways. 
A)  The Global one also saves and published the session before installation. 
B)  The Global one can install multiple selected policies at the same time. 
C)  The local one does not install the Anti-Malware policy along with the Network policy. 
D)  The second one pre-select the installation for only the current policy and for the applicable gateways.

Question 12

When a Security Gateway sends its logs to an IP address other than its own, which deployment option is installed?

Accepted Answer

A)  Distributed 
B)  Standalone 
C)  Bridge Mode 
D)  Targeted 
A)  Distributed 
B)  Standalone 
C)  Bridge Mode 
D)  Targeted

Question 13

Which of the following is NOT a role of the SmartCenter:

Accepted Answer

A)  Status monitoring 
B)  Policy configuration 
C)  Certificate authority 
D)  Address translation 
A)  Status monitoring 
B)  Policy configuration 
C)  Certificate authority 
D)  Address translation

Question 14

Which authentication scheme requires a user to possess a token?

Accepted Answer

A)  TACACS 
B)  SecurID 
C)  Check Point password 
D)  RADIUS 
A)  TACACS 
B)  SecurID 
C)  Check Point password 
D)  RADIUS

Question 15

Which SmartConsole tab shows logs and detects security threats, providing a centralized display of potential attack patterns from all network devices?

Accepted Answer

A)  Gateway and Servers 
B)  Logs and Monitor 
C)  Manage Seeting 
D)  Security Policies 
A)  Gateway and Servers 
B)  Logs and Monitor 
C)  Manage Seeting 
D)  Security Policies

Question 16

What is the default time length that Hit Count Data is kept?

Accepted Answer

A)  3 month 
B)  4 weeks 
C)  12 months 
D)  1 week 
A)  3 month 
B)  4 weeks 
C)  12 months 
D)  1 week

Question 17

Please choose correct command syntax to add an "emailserver1" host with IP address 10.50.23.90 using GAiA management CLI?

Accepted Answer

A)  host name myHost12 ip-address 10.50.23.90 
B)  mgmt add host name ip-address 10.50.23.90 
C)  add host name emailserver1 ip-address 10.50.23.90 
D)  mgmt add host name emailserver1 ip-address 10.50.23.90 
A)  host name myHost12 ip-address 10.50.23.90 
B)  mgmt add host name ip-address 10.50.23.90 
C)  add host name emailserver1 ip-address 10.50.23.90 
D)  mgmt add host name emailserver1 ip-address 10.50.23.90

Question 18

Which of the following is an authentication method used for Identity Awareness?

Accepted Answer

A)  SSL 
B)  Captive Portal 
C)  PKI 
D)  RSA 
A)  SSL 
B)  Captive Portal 
C)  PKI 
D)  RSA

Question 19

How is communication between different Check Point components secured in R80? As with all questions, select the best answer.

Accepted Answer

A)  By using IPSEC 
B)  By using SIC 
C)  By using ICA 
D)  By using 3DES 
A)  By using IPSEC 
B)  By using SIC 
C)  By using ICA 
D)  By using 3DES

Question 20

When installing a dedicated R80 SmartEvent server, what is the recommended size of the root partition?

Accepted Answer

A)  Any size 
B)  Less than 20GB 
C)  More than 10GB and less than 20 GB 
D)  At least 20GB 
A)  Any size 
B)  Less than 20GB 
C)  More than 10GB and less than 20 GB 
D)  At least 20GB

Which is NOT an encryption algorithm that can be used in an IPSEC Security Association (Phase 2)?

Fill in the blank: ________information is included in the "Full Log" tracking option, but is not included in the "Log" tracking option?

There are 4 ways to use the Management API for creating host object with R80 Management API. Which one is NOT correct?

Which application should you use to install a contract file?

The "Hit count" feature allows tracking the number of connections that each rule matches. Will the Hit count feature work independently from logging and Track the hits even if the Track option is set to "None"?

Which options are given on features, when editing a Role on Gaia Platform?

What is also referred to as Dynamic NAT ?

When configuring LDAP User Directory integration, changes applied to a User Directory template are:

Which command is used to add users to or from existing roles?

Which type of Check Point license is tied to the IP address of a specific Security Gateway and cannot be transferred to a gateway that has a different IP address?

What is the most complete definition of the difference between the Install Policy button on the SmartConsole's tab, and the Install Policy within a specific policy?

When a Security Gateway sends its logs to an IP address other than its own, which deployment option is installed?

Which of the following is NOT a role of the SmartCenter:

Which authentication scheme requires a user to possess a token?

Which SmartConsole tab shows logs and detects security threats, providing a centralized display of potential attack patterns from all network devices?

What is the default time length that Hit Count Data is kept?

Please choose correct command syntax to add an "emailserver1" host with IP address 10.50.23.90 using GAiA management CLI?

Which of the following is an authentication method used for Identity Awareness?

How is communication between different Check Point components secured in R80? As with all questions, select the best answer.

When installing a dedicated R80 SmartEvent server, what is the recommended size of the root partition?

Check Point Certified Security Principles Associate (CCSPA)

Check Point Certified Security Expert - R80

Filters

Exam 2: Check Point Certified Security Administrator (CCSA R80)

Which is NOT an encryption algorithm that can be used in an IPSEC Security Association (Phase 2)?

Fill in the blank: ________information is included in the "Full Log" tracking option, but is not included in the "Log" tracking option?

There are 4 ways to use the Management API for creating host object with R80 Management API. Which one is NOT correct?

Which application should you use to install a contract file?

The "Hit count" feature allows tracking the number of connections that each rule matches. Will the Hit count feature work independently from logging and Track the hits even if the Track option is set to "None"?

Which options are given on features, when editing a Role on Gaia Platform?

What is also referred to as Dynamic NAT ?

When configuring LDAP User Directory integration, changes applied to a User Directory template are:

Which command is used to add users to or from existing roles?

Which type of Check Point license is tied to the IP address of a specific Security Gateway and cannot be transferred to a gateway that has a different IP address?

What is the most complete definition of the difference between the Install Policy button on the SmartConsole's tab, and the Install Policy within a specific policy?

When a Security Gateway sends its logs to an IP address other than its own, which deployment option is installed?

Which of the following is NOT a role of the SmartCenter:

Which authentication scheme requires a user to possess a token?

Which SmartConsole tab shows logs and detects security threats, providing a centralized display of potential attack patterns from all network devices?

What is the default time length that Hit Count Data is kept?

Please choose correct command syntax to add an "emailserver1" host with IP address 10.50.23.90 using GAiA management CLI?

Which of the following is an authentication method used for Identity Awareness?

How is communication between different Check Point components secured in R80? As with all questions, select the best answer.

When installing a dedicated R80 SmartEvent server, what is the recommended size of the root partition?

Check Point Certified Security Principles Associate (CCSPA)

Check Point Certified Security Expert - R80

Filters