Question 1

Which of the following is NOT a tracking option? (Choose three.)

Accepted Answer

A)  Partial log 
B)  Log 
C)  Network log 
D)  Full log 
A)  Partial log 
B)  Log 
C)  Network log 
D)  Full log

Question 2

What are the three authentication methods for SIC?

Accepted Answer

A)  Passwords, Users, and standards-based SSL for the creation of security channels 
B)  Certificates, standards-based SSL for the creation of secure channels, and 3DES or AES128 for encryption 
C)  Packet Filtering, certificates, and 3DES or AES128 for encryption 
D)  Certificates, Passwords, and Tokens 
A)  Passwords, Users, and standards-based SSL for the creation of security channels 
B)  Certificates, standards-based SSL for the creation of secure channels, and 3DES or AES128 for encryption 
C)  Packet Filtering, certificates, and 3DES or AES128 for encryption 
D)  Certificates, Passwords, and Tokens

Question 3

Fill in the blank: An LDAP server holds one or more ______________.

Accepted Answer

A)  Server Units 
B)  Administrator Units 
C)  Account Units 
D)  Account Servers 
A)  Server Units 
B)  Administrator Units 
C)  Account Units 
D)  Account Servers

Question 4

To quickly review when Threat Prevention signatures were last updated, which Threat Tool would an administrator use?

Accepted Answer

A)  Protections 
B)  IPS Protections 
C)  Profiles 
D)  ThreatWiki 
A)  Protections 
B)  IPS Protections 
C)  Profiles 
D)  ThreatWiki

Question 5

Fill in the blank: It is Best Practice to have a _____ rule at the end of each policy layer.

Accepted Answer

A)  Explicit Drop 
B)  Implied Drop 
C)  Explicit CleanUp 
D)  Implicit Drop 
A)  Explicit Drop 
B)  Implied Drop 
C)  Explicit CleanUp 
D)  Implicit Drop

Question 6

Using the SmartConsole, which pre-defined Permission Profile should be assigned to an administrator that requires full access to audit all configurations without modifying them?

Accepted Answer

A)  Editor 
B)  Read Only All 
C)  Super User 
D)  Full Access 
A)  Editor 
B)  Read Only All 
C)  Super User 
D)  Full Access

Question 7

What two ordered layers make up the Access Control Policy Layer?

Accepted Answer

A)  URL Filtering and Network 
B)  Network and Threat Prevention 
C)  Application Control and URL Filtering 
D)  Network and Application Control 
A)  URL Filtering and Network 
B)  Network and Threat Prevention 
C)  Application Control and URL Filtering 
D)  Network and Application Control

Question 8

When configuring LDAP User Directory integration, Changes applied to a User Directory template are:

Accepted Answer

A)  Reflected immediately for all users who are using template. 
B)  Not reflected for any users unless the local user template is changed. 
C)  Reflected for all users who are using that template and if the local user template is changed as well. 
D)  Not reflected for any users who are using that template. 
A)  Reflected immediately for all users who are using template. 
B)  Not reflected for any users unless the local user template is changed. 
C)  Reflected for all users who are using that template and if the local user template is changed as well. 
D)  Not reflected for any users who are using that template.

Question 9

Fill in the blank: An identity server uses a ___________ for user authentication.

Accepted Answer

A)  Shared secret 
B)  Certificate 
C)  One-time password 
D)  Token 
A)  Shared secret 
B)  Certificate 
C)  One-time password 
D)  Token

Question 10

Permanent VPN tunnels can be set on all tunnels in the community, on all tunnels for specific gateways, or__________.

Accepted Answer

A)  On all satellite gateway to satellite gateway tunnels 
B)  On specific tunnels for specific gateways 
C)  On specific tunnels in the community 
D)  On specific satellite gateway to central gateway tunnels 
A)  On all satellite gateway to satellite gateway tunnels 
B)  On specific tunnels for specific gateways 
C)  On specific tunnels in the community 
D)  On specific satellite gateway to central gateway tunnels

Question 11

Which feature is NOT provided by all Check Point Mobile Access solutions?

Accepted Answer

A)  Support for IPv6 
B)  Granular access control 
C)  Strong user authentication 
D)  Secure connectivity 
A)  Support for IPv6 
B)  Granular access control 
C)  Strong user authentication 
D)  Secure connectivity

Question 12

What is the default time length that Hit Count Data is kept?

Accepted Answer

A)  3 month 
B)  4 weeks 
C)  12 months 
D)  6 months 
A)  3 month 
B)  4 weeks 
C)  12 months 
D)  6 months

Question 13

To build an effective Security Policy, use a ________ and _______ rule.

Accepted Answer

A)  Cleanup; stealth 
B)  Stealth; implicit 
C)  Cleanup; default 
D)  Implicit; explicit 
A)  Cleanup; stealth 
B)  Stealth; implicit 
C)  Cleanup; default 
D)  Implicit; explicit

Question 14

What does it mean if Bob gets this result on an object search? Refer to the image below.

Accepted Answer

A)  Search detailed is missing the subnet mask. 
B)  There is no object on the database with that name or that IP address. 
C)  There is no object on the database with that IP address. 
D)  Object does not have a NAT IP address. 
A)  Search detailed is missing the subnet mask. 
B)  There is no object on the database with that name or that IP address. 
C)  There is no object on the database with that IP address. 
D)  Object does not have a NAT IP address.

Question 15

You want to verify if there are unsaved changes in GAiA that will be lost with a reboot. What command can be used?

Accepted Answer

A)  show unsaved 
B)  show save-state 
C)  show configuration diff 
D)  show config-state 
A)  show unsaved 
B)  show save-state 
C)  show configuration diff 
D)  show config-state

Question 16

The Gaia operating system supports which routing protocols?

Accepted Answer

A)  BGP, OSPF, RIP 
B)  BGP, OSPF, EIGRP, PIM, IGMP 
C)  BGP, OSPF, RIP, IGRP 
D)  BGP, OSPF, RIP, EIGRP 
A)  BGP, OSPF, RIP 
B)  BGP, OSPF, EIGRP, PIM, IGMP 
C)  BGP, OSPF, RIP, IGRP 
D)  BGP, OSPF, RIP, EIGRP

Question 17

Sally has a Hot Fix Accumulator (HFA) she wants to install on her Security Gateway which operates with GAiA, but she cannot SCP the HFA to the system. She can SSH into the Security Gateway, but she has never been able to SCP files to it. What would be the most likely reason she cannot do so?

Accepted Answer

A)  She needs to edit /etc/SSHd/SSHd_config and add the Standard Mode account. She needs to edit /etc/SSHd/SSHd_config and add the Standard Mode account. 
B)  She needs to run s ysconfig and restart the SSH process. She needs to run s ysconfig and restart the SSH process. 
C)  She needs to edit /etc/scpusers and add the Standard Mode account. /etc/scpusers 
D)  She needs to run cpconfig to enable the ability to SCP files. She needs to run cpconfig to enable the ability to SCP files. 
A)  She needs to edit /etc/SSHd/SSHd_config and add the Standard Mode account. She needs to edit /etc/SSHd/SSHd_config and add the Standard Mode account. 
B)  She needs to run s ysconfig and restart the SSH process. She needs to run s ysconfig and restart the SSH process. 
C)  She needs to edit /etc/scpusers and add the Standard Mode account. /etc/scpusers 
D)  She needs to run cpconfig to enable the ability to SCP files. She needs to run cpconfig to enable the ability to SCP files.

Question 18

Which of the following is NOT an element of VPN Simplified Mode and VPN Communities?

Accepted Answer

A)  "Encrypt" action in the Rule Base 
B)  Permanent Tunnels 
C)  "VPN" column in the Rule Base 
D)  Configuration checkbox "Accept all encrypted traffic" 
A)  "Encrypt" action in the Rule Base 
B)  Permanent Tunnels 
C)  "VPN" column in the Rule Base 
D)  Configuration checkbox "Accept all encrypted traffic"

Question 19

Which of the following is considered to be the more secure and preferred VPN authentication method?

Accepted Answer

A)  Password 
B)  Certificate 
C)  MD5 
D)  Pre-shared secret 
A)  Password 
B)  Certificate 
C)  MD5 
D)  Pre-shared secret

Question 20

How do you manage Gaia?

Accepted Answer

A)  Through CLI and WebUI 
B)  Through CLI only 
C)  Through SmartDashboard only 
D)  Through CLI, WebUI, and SmartDashboard 
A)  Through CLI and WebUI 
B)  Through CLI only 
C)  Through SmartDashboard only 
D)  Through CLI, WebUI, and SmartDashboard

Which of the following is NOT a tracking option? (Choose three.)

What are the three authentication methods for SIC?

Fill in the blank: An LDAP server holds one or more ______________.

To quickly review when Threat Prevention signatures were last updated, which Threat Tool would an administrator use?

Fill in the blank: It is Best Practice to have a _____ rule at the end of each policy layer.

Using the SmartConsole, which pre-defined Permission Profile should be assigned to an administrator that requires full access to audit all configurations without modifying them?

What two ordered layers make up the Access Control Policy Layer?

When configuring LDAP User Directory integration, Changes applied to a User Directory template are:

Fill in the blank: An identity server uses a ___________ for user authentication.

Permanent VPN tunnels can be set on all tunnels in the community, on all tunnels for specific gateways, or__________.

Which feature is NOT provided by all Check Point Mobile Access solutions?

What is the default time length that Hit Count Data is kept?

To build an effective Security Policy, use a __ and _ rule.

What does it mean if Bob gets this result on an object search? Refer to the image below.

You want to verify if there are unsaved changes in GAiA that will be lost with a reboot. What command can be used?

The Gaia operating system supports which routing protocols?

Sally has a Hot Fix Accumulator (HFA) she wants to install on her Security Gateway which operates with GAiA, but she cannot SCP the HFA to the system. She can SSH into the Security Gateway, but she has never been able to SCP files to it. What would be the most likely reason she cannot do so?

Which of the following is NOT an element of VPN Simplified Mode and VPN Communities?

Which of the following is considered to be the more secure and preferred VPN authentication method?

How do you manage Gaia?

Check Point Certified Security Principles Associate (CCSPA)

Check Point Certified Security Expert - R80

Filters

Exam 2: Check Point Certified Security Administrator (CCSA R80)

Which of the following is NOT a tracking option? (Choose three.)

What are the three authentication methods for SIC?

Fill in the blank: An LDAP server holds one or more ______________.

To quickly review when Threat Prevention signatures were last updated, which Threat Tool would an administrator use?

Fill in the blank: It is Best Practice to have a _____ rule at the end of each policy layer.

Using the SmartConsole, which pre-defined Permission Profile should be assigned to an administrator that requires full access to audit all configurations without modifying them?

What two ordered layers make up the Access Control Policy Layer?

When configuring LDAP User Directory integration, Changes applied to a User Directory template are:

Fill in the blank: An identity server uses a ___________ for user authentication.

Permanent VPN tunnels can be set on all tunnels in the community, on all tunnels for specific gateways, or__________.

Which feature is NOT provided by all Check Point Mobile Access solutions?

What is the default time length that Hit Count Data is kept?

To build an effective Security Policy, use a ________ and _______ rule.

What does it mean if Bob gets this result on an object search? Refer to the image below.

You want to verify if there are unsaved changes in GAiA that will be lost with a reboot. What command can be used?

The Gaia operating system supports which routing protocols?

Sally has a Hot Fix Accumulator (HFA) she wants to install on her Security Gateway which operates with GAiA, but she cannot SCP the HFA to the system. She can SSH into the Security Gateway, but she has never been able to SCP files to it. What would be the most likely reason she cannot do so?

Which of the following is NOT an element of VPN Simplified Mode and VPN Communities?

Which of the following is considered to be the more secure and preferred VPN authentication method?

How do you manage Gaia?

Check Point Certified Security Principles Associate (CCSPA)

Check Point Certified Security Expert - R80

Filters

To build an effective Security Policy, use a __ and _ rule.