Question 1

When tunnel test packets no longer invoke a response, SmartView Monitor displays _____________ for the given VPN tunnel.

Accepted Answer

A)  Down 
B)  No Response 
C)  Inactive 
D)  Failed 
A)  Down 
B)  No Response 
C)  Inactive 
D)  Failed

Question 2

Vanessa is expecting a very important Security Report. The Document should be sent as an attachment via e-mail. An e-mail with Security_report.pdf file was delivered to her e-mail inbox. When she opened the PDF file, she noticed that the file is basically empty and only few lines of text are in it. The report is missing some graphs, tables and links. Which component of SandBlast protection is her company using on a Gateway?

Accepted Answer

A)  SandBlast Threat Emulation 
B)  SandBlast Agent 
C)  Check Point Protect 
D)  SandBlast Threat Extraction 
A)  SandBlast Threat Emulation 
B)  SandBlast Agent 
C)  Check Point Protect 
D)  SandBlast Threat Extraction

Question 3

Using mgmt_cli, what is the correct syntax to import a host object called Server_1 from the CLI?

Accepted Answer

A)  mgmt_cli add-host "Server_1" ip_address "10.15.123.10" --format txt 
B)  mgmt_cli add host name "Server_1" ip_address "10.15.123.10" --format json 
C)  mgmt_cli add object-host "Server_1" ip_address "10.15.123.10" --format json 
D)  mgmt_cli add object "Server_1" ip_address "10.15.123.10" --format json 
A)  mgmt_cli add-host "Server_1" ip_address "10.15.123.10" --format txt 
B)  mgmt_cli add host name "Server_1" ip_address "10.15.123.10" --format json 
C)  mgmt_cli add object-host "Server_1" ip_address "10.15.123.10" --format json 
D)  mgmt_cli add object "Server_1" ip_address "10.15.123.10" --format json

Question 4

As a Security Administrator, you must refresh the Client Authentication authorized time-out every time a new user connection is authorized. How do you do this? Enable the Refreshable Timeout setting:

Accepted Answer

A)  in the user object's Authentication screen. in the user object's Authentication screen. 
B)  in the Gateway object's Authentication screen. in the Gateway object's 
C)  in the Limit tab of the Client Authentication Action Properties screen. in the Limit tab of the Client Authentication Action Properties 
D)  in the Global Properties Authentication screen. Global Properties Authentication 
A)  in the user object's Authentication screen. in the user object's Authentication screen. 
B)  in the Gateway object's Authentication screen. in the Gateway object's 
C)  in the Limit tab of the Client Authentication Action Properties screen. in the Limit tab of the Client Authentication Action Properties 
D)  in the Global Properties Authentication screen. Global Properties Authentication

Question 5

Which of the following is NOT a valid deployment option for R80?

Accepted Answer

A)  All-in-one (stand-alone) 
B)  Log server 
C)  SmartEvent 
D)  Multi-domain management server 
A)  All-in-one (stand-alone) 
B)  Log server 
C)  SmartEvent 
D)  Multi-domain management server

Question 6

Which Check Point software blade provides Application Security and identity control?

Accepted Answer

A)  Identity Awareness 
B)  Data Loss Prevention 
C)  URL Filtering 
D)  Application Control 
A)  Identity Awareness 
B)  Data Loss Prevention 
C)  URL Filtering 
D)  Application Control

Question 7

Which SmartConsole tab shows logs and detects security threats, providing a centralized display of potential attack patterns from all network devices?

Accepted Answer

A)  Gateway and Servers 
B)  Logs and Monitor 
C)  Manage and Settings 
D)  Security Policies 
A)  Gateway and Servers 
B)  Logs and Monitor 
C)  Manage and Settings 
D)  Security Policies

Question 8

You are going to upgrade from R77 to R80. Before the upgrade, you want to back up the system so that, if there are any problems, you can easily restore to the old version with all configuration and management files intact. What is the BEST backup method in this scenario?

Accepted Answer

A)  backup 
B)  Database Revision 
C)  snapshot 
D)  migrate export 
A)  backup 
B)  Database Revision 
C)  snapshot 
D)  migrate export

Question 9

Which of the following are types of VPN communities?

Accepted Answer

A)  Pentagon, star, and combination 
B)  Star, octagon, and combination 
C)  Combined and star 
D)  Meshed, star, and combination 
A)  Pentagon, star, and combination 
B)  Star, octagon, and combination 
C)  Combined and star 
D)  Meshed, star, and combination

Question 10

During the Check Point Stateful Inspection Process, for packets that do not pass Firewall Kernel Inspection and are rejected by the rule definition, packets are:

Accepted Answer

A)  Dropped without sending a negative acknowledgment 
B)  Dropped without logs and without sending a negative acknowledgment 
C)  Dropped with negative acknowledgment 
D)  Dropped with logs and without sending a negative acknowledgment 
A)  Dropped without sending a negative acknowledgment 
B)  Dropped without logs and without sending a negative acknowledgment 
C)  Dropped with negative acknowledgment 
D)  Dropped with logs and without sending a negative acknowledgment

Question 11

In Security Gateways, SIC uses ______________ for encryption.

Accepted Answer

A)  AES-128 
B)  AES-256 
C)  DES 
D)  3DES 
A)  AES-128 
B)  AES-256 
C)  DES 
D)  3DES

Question 12

What are the two types of NAT supported by the Security Gateway?

Accepted Answer

A)  Destination and Hide 
B)  Hide and Static 
C)  Static and Source 
D)  Source and Destination 
A)  Destination and Hide 
B)  Hide and Static 
C)  Static and Source 
D)  Source and Destination

Question 13

Which of the following blades is NOT subscription-based and therefore does not have to be renewed on a regular basis?

Accepted Answer

A)  Application Control 
B)  Threat Emulation 
C)  Anti-Virus 
D)  Advanced Networking Blade 
A)  Application Control 
B)  Threat Emulation 
C)  Anti-Virus 
D)  Advanced Networking Blade

Question 14

Which repositories are installed on the Security Management Server by SmartUpdate?

Accepted Answer

A)  License and Update 
B)  Package Repository and Licenses 
C)  Update and License & Contract 
D)  License & Contract and Package Repository 
A)  License and Update 
B)  Package Repository and Licenses 
C)  Update and License & Contract 
D)  License & Contract and Package Repository

Question 15

The R80 utility fw monitor is used to troubleshoot _____________

Accepted Answer

A)  User data base corruption 
B)  LDAP conflicts 
C)  Traffic issues 
D)  Phase two key negotiation 
A)  User data base corruption 
B)  LDAP conflicts 
C)  Traffic issues 
D)  Phase two key negotiation

Question 16

Which of the following is NOT an alert option?

Accepted Answer

A)  SNMP 
B)  High alert 
C)  Mail 
D)  User defined alert 
A)  SNMP 
B)  High alert 
C)  Mail 
D)  User defined alert

Question 17

Which path below is available only when CoreXL is enabled?

Accepted Answer

A)  Slow path 
B)  Firewall path 
C)  Medium path 
D)  Accelerated path 
A)  Slow path 
B)  Firewall path 
C)  Medium path 
D)  Accelerated path

Question 18

An administrator is creating an IPsec site-to-site VPN between his corporate office and branch office. Both offices are protected by Check Point Security Gateway managed by the same Security Management Server (SMS). While configuring the VPN community to specify the pre-shared secret, the administrator did not find a box to input the pre-shared secret. Why does it not allow him to specify the pre-shared secret?

Accepted Answer

A)  The Gateway is an SMB device 
B)  The checkbox "Use only Shared Secret for all external members" is not checked 
C)  Certificate based Authentication is the only authentication method available between two Security Gateway managed by the same SMS 
D)  Pre-shared secret is already configured in Global Properties 
A)  The Gateway is an SMB device 
B)  The checkbox "Use only Shared Secret for all external members" is not checked 
C)  Certificate based Authentication is the only authentication method available between two Security Gateway managed by the same SMS 
D)  Pre-shared secret is already configured in Global Properties

Question 19

Which one of these features is NOT associated with the Check Point URL Filtering and Application Control Blade?

Accepted Answer

A)  Detects and blocks malware by correlating multiple detection engines before users are affected. 
B)  Configure rules to limit the available network bandwidth for specified users or groups. 
C)  Use UserCheck to help users understand that certain websites are against the company's security policy. 
D)  Make rules to allow or block applications and Internet sites for individual applications, categories, and risk levels. 
A)  Detects and blocks malware by correlating multiple detection engines before users are affected. 
B)  Configure rules to limit the available network bandwidth for specified users or groups. 
C)  Use UserCheck to help users understand that certain websites are against the company's security policy. 
D)  Make rules to allow or block applications and Internet sites for individual applications, categories, and risk levels.

Question 20

In the Check Point Security Management Architecture, which component(s) can store logs?

Accepted Answer

A)  SmartConsole 
B)  Security Management Server and Security Gateway 
C)  Security Management Server 
D)  SmartConsole and Security Management Server 
A)  SmartConsole 
B)  Security Management Server and Security Gateway 
C)  Security Management Server 
D)  SmartConsole and Security Management Server

When tunnel test packets no longer invoke a response, SmartView Monitor displays _____________ for the given VPN tunnel.

Using mgmt_cli, what is the correct syntax to import a host object called Server_1 from the CLI?

As a Security Administrator, you must refresh the Client Authentication authorized time-out every time a new user connection is authorized. How do you do this? Enable the Refreshable Timeout setting:

Which of the following is NOT a valid deployment option for R80?

Which Check Point software blade provides Application Security and identity control?

Which SmartConsole tab shows logs and detects security threats, providing a centralized display of potential attack patterns from all network devices?

You are going to upgrade from R77 to R80. Before the upgrade, you want to back up the system so that, if there are any problems, you can easily restore to the old version with all configuration and management files intact. What is the BEST backup method in this scenario?

Which of the following are types of VPN communities?

During the Check Point Stateful Inspection Process, for packets that do not pass Firewall Kernel Inspection and are rejected by the rule definition, packets are:

In Security Gateways, SIC uses ______________ for encryption.

What are the two types of NAT supported by the Security Gateway?

Which of the following blades is NOT subscription-based and therefore does not have to be renewed on a regular basis?

Which repositories are installed on the Security Management Server by SmartUpdate?

The R80 utility fw monitor is used to troubleshoot _____________

Which of the following is NOT an alert option?

Which path below is available only when CoreXL is enabled?

Which one of these features is NOT associated with the Check Point URL Filtering and Application Control Blade?

In the Check Point Security Management Architecture, which component(s) can store logs?

Check Point Certified Security Principles Associate (CCSPA)

Check Point Certified Security Expert - R80

Filters

Exam 2: Check Point Certified Security Administrator (CCSA R80)

When tunnel test packets no longer invoke a response, SmartView Monitor displays _____________ for the given VPN tunnel.

Using mgmt_cli, what is the correct syntax to import a host object called Server_1 from the CLI?

As a Security Administrator, you must refresh the Client Authentication authorized time-out every time a new user connection is authorized. How do you do this? Enable the Refreshable Timeout setting:

Which of the following is NOT a valid deployment option for R80?

Which Check Point software blade provides Application Security and identity control?

Which SmartConsole tab shows logs and detects security threats, providing a centralized display of potential attack patterns from all network devices?

You are going to upgrade from R77 to R80. Before the upgrade, you want to back up the system so that, if there are any problems, you can easily restore to the old version with all configuration and management files intact. What is the BEST backup method in this scenario?

Which of the following are types of VPN communities?

During the Check Point Stateful Inspection Process, for packets that do not pass Firewall Kernel Inspection and are rejected by the rule definition, packets are:

In Security Gateways, SIC uses ______________ for encryption.

What are the two types of NAT supported by the Security Gateway?

Which of the following blades is NOT subscription-based and therefore does not have to be renewed on a regular basis?

Which repositories are installed on the Security Management Server by SmartUpdate?

The R80 utility fw monitor is used to troubleshoot _____________

Which of the following is NOT an alert option?

Which path below is available only when CoreXL is enabled?

Which one of these features is NOT associated with the Check Point URL Filtering and Application Control Blade?

In the Check Point Security Management Architecture, which component(s) can store logs?

Check Point Certified Security Principles Associate (CCSPA)

Check Point Certified Security Expert - R80

Filters