Question 1

What port is used for delivering logs from the gateway to the management server?

Accepted Answer

A)  Port 258 
B)  Port 18209 
C)  Port 257 
D)  Port 981 
A)  Port 258 
B)  Port 18209 
C)  Port 257 
D)  Port 981

Question 2

The tool _______ generates a R80 Security Gateway configuration report.

Accepted Answer

A)  infoCP 
B)  infoview 
C)  cpinfo 
D)  fw cpinfo 
A)  infoCP 
B)  infoview 
C)  cpinfo 
D)  fw cpinfo

Question 3

Review the following screenshot and select the BEST answer.

Accepted Answer

A)  Data Center Layer is an inline layer in the Access Control Policy. 
B)  By default all layers are shared with all policies. 
C)  If a connection is dropped in Network Layer, it will not be matched against the rules in Data Center Layer. 
D)  If a connection is accepted in Network-layer, it will not be matched against the rules in Data Center Layer. 
A)  Data Center Layer is an inline layer in the Access Control Policy. 
B)  By default all layers are shared with all policies. 
C)  If a connection is dropped in Network Layer, it will not be matched against the rules in Data Center Layer. 
D)  If a connection is accepted in Network-layer, it will not be matched against the rules in Data Center Layer.

Question 4

AdminA and AdminB are both logged in on SmartConsole. What does it mean if AdminB sees a lock icon on a rule? Choose the BEST answer.

Accepted Answer

A)  Rule is locked by AdminA, because the save button has not been pressed. 
B)  Rule is locked by AdminA, because the rule is currently being edited. 
C)  Rule is locked by AdminA, and will be made it available if the session is published. 
D)  Rule is locked by AdminA, and if the session is saved, the rule will be made available. 
A)  Rule is locked by AdminA, because the save button has not been pressed. 
B)  Rule is locked by AdminA, because the rule is currently being edited. 
C)  Rule is locked by AdminA, and will be made it available if the session is published. 
D)  Rule is locked by AdminA, and if the session is saved, the rule will be made available.

Question 5

You have two rules, ten users, and two user groups in a Security Policy. You create database version 1 for this configuration. You then delete two existing users and add a new user group. You modify one rule and add two new rules to the Rule Base. You save the Security Policy and create database version 2. After a while, you decide to roll back to version 1 to use the Rule Base, but you want to keep your user database. How can you do this?

Accepted Answer

A)  Run fwm dbexport -1 filename . Restore the database. Then, run fwm dbimport -1 filename to import the users. Run fwm dbexport -1 filename . Restore the database. Then, run fwm dbimport -1 filename to import the users. 
B)  Run fwm_dbexport to export the user database. Select restore the entire database in the Database Revision screen. Then, run fwm_dbimport . fwm_dbexport to export the user database. Select restore the entire database in the Database Revision screen. Then, run fwm_dbimport . 
C)  Restore the entire database, except the user database, and then create the new user and user group. 
D)  Restore the entire database, except the user database. 
A)  Run fwm dbexport -1 filename . Restore the database. Then, run fwm dbimport -1 filename to import the users. Run fwm dbexport -1 filename . Restore the database. Then, run fwm dbimport -1 filename to import the users. 
B)  Run fwm_dbexport to export the user database. Select restore the entire database in the Database Revision screen. Then, run fwm_dbimport . fwm_dbexport to export the user database. Select restore the entire database in the Database Revision screen. Then, run fwm_dbimport . 
C)  Restore the entire database, except the user database, and then create the new user and user group. 
D)  Restore the entire database, except the user database.

Question 6

Which remote Access Solution is clientless?

Accepted Answer

A)  Checkpoint Mobile 
B)  Endpoint Security Suite 
C)  SecuRemote 
D)  Mobile Access Portal 
A)  Checkpoint Mobile 
B)  Endpoint Security Suite 
C)  SecuRemote 
D)  Mobile Access Portal

Question 7

Fill in the blank: When LDAP is integrated with Check Point Security Management, it is then referred to as _______

Accepted Answer

A)  UserCheck 
B)  User Directory 
C)  User Administration 
D)  User Center 
A)  UserCheck 
B)  User Directory 
C)  User Administration 
D)  User Center

Question 8

AdminA and AdminB are both logged in on SmartConsole. What does it mean if AdminB sees a lock icon on a rule?

Accepted Answer

A)  Rule is locked by AdminA, because the save button has not been pressed. 
B)  Rule is locked by AdminA, because the rule is currently being edited. 
C)  Rule is locked by AdminA, and will be made it available if the session is published. 
D)  Rule is locked by AdminA, and if the session is saved, the rule will be made available. 
A)  Rule is locked by AdminA, because the save button has not been pressed. 
B)  Rule is locked by AdminA, because the rule is currently being edited. 
C)  Rule is locked by AdminA, and will be made it available if the session is published. 
D)  Rule is locked by AdminA, and if the session is saved, the rule will be made available.

Question 9

Fill in the blanks: A High Availability deployment is referred to as a ______ cluster and a Load Sharing deployment is referred to as a ________ cluster.

Accepted Answer

A)  Standby/standby; active/active 
B)  Active/active; standby/standby 
C)  Active/active; active/standby; 
D)  Active/standby; active/active 
A)  Standby/standby; active/active 
B)  Active/active; standby/standby 
C)  Active/active; active/standby; 
D)  Active/standby; active/active

Question 10

VPN gateways authenticate using ___________ and ___________ .

Accepted Answer

A)  Passwords; tokens 
B)  Certificates; pre-shared secrets 
C)  Certificates; passwords 
D)  Tokens; pre-shared secrets 
A)  Passwords; tokens 
B)  Certificates; pre-shared secrets 
C)  Certificates; passwords 
D)  Tokens; pre-shared secrets

Question 11

Fill in the blank: When a policy package is installed, ________ are also distributed to the target installation Security Gateways.

Accepted Answer

A)  User and objects databases 
B)  Network databases 
C)  SmartConsole databases 
D)  User databases 
A)  User and objects databases 
B)  Network databases 
C)  SmartConsole databases 
D)  User databases

Question 12

Which of the following is a new R80.10 Gateway feature that had not been available in R77.X and older?

Accepted Answer

A)  The rule base can be built of layers, each containing a set of the security rules. Layers are inspected in the order in which they are defined, allowing control over the rule base flow and which security functionalities take precedence. 
B)  Limits the upload and download throughput for streaming media in the company to 1 Gbps. 
C)  Time object to a rule to make the rule active only during specified times. 
D)  Sub Policies are sets of rules that can be created and attached to specific rules. If the rule is matched, inspection will continue in the sub policy attached to it rather than in the next rule. 
A)  The rule base can be built of layers, each containing a set of the security rules. Layers are inspected in the order in which they are defined, allowing control over the rule base flow and which security functionalities take precedence. 
B)  Limits the upload and download throughput for streaming media in the company to 1 Gbps. 
C)  Time object to a rule to make the rule active only during specified times. 
D)  Sub Policies are sets of rules that can be created and attached to specific rules. If the rule is matched, inspection will continue in the sub policy attached to it rather than in the next rule.

Question 13

In SmartConsole, objects are used to represent physical and virtual network components and also some logical components. These objects are divided into several categories. Which of the following is NOT an objects category?

Accepted Answer

A)  Limit 
B)  IP Address 
C)  Custom Application / Site 
D)  Network Object 
A)  Limit 
B)  IP Address 
C)  Custom Application / Site 
D)  Network Object

Question 14

What is the purpose of a Clean-up Rule?

Accepted Answer

A)  Clean-up Rules do not server any purpose. 
B)  Provide a metric for determining unnecessary rules. 
C)  To drop any traffic that is not explicitly allowed. 
D)  Used to better optimize a policy. 
A)  Clean-up Rules do not server any purpose. 
B)  Provide a metric for determining unnecessary rules. 
C)  To drop any traffic that is not explicitly allowed. 
D)  Used to better optimize a policy.

Question 15

Harriet wants to protect sensitive information from intentional loss when users browse to a specific URL: https://personal.mymail.com, which blade will she enable to achieve her goal?

Accepted Answer

A)  DLP 
B)  SSL Inspection 
C)  Application Control 
D)  URL Filtering 
A)  DLP 
B)  SSL Inspection 
C)  Application Control 
D)  URL Filtering

Question 16

What are the three conflict resolution rules in the Threat Prevention Policy Layers?

Accepted Answer

A)  Conflict on action, conflict on exception, and conflict on settings 
B)  Conflict on scope, conflict on settings, and conflict on exception 
C)  Conflict on settings, conflict on address, and conflict on exception 
D)  Conflict on action, conflict on destination, and conflict on settings 
A)  Conflict on action, conflict on exception, and conflict on settings 
B)  Conflict on scope, conflict on settings, and conflict on exception 
C)  Conflict on settings, conflict on address, and conflict on exception 
D)  Conflict on action, conflict on destination, and conflict on settings

Question 17

When you upload a package or license to the appropriate repository in SmartUpdate, where is the package or license stored

Accepted Answer

A)  Security Gateway 
B)  Check Point user center 
C)  Security Management Server 
D)  SmartConsole installed device 
A)  Security Gateway 
B)  Check Point user center 
C)  Security Management Server 
D)  SmartConsole installed device

Question 18

Fill in the blank: The R80 feature ________ permits blocking specific IP addresses for a specified time period.

Accepted Answer

A)  Block Port Overflow 
B)  Local Interface Spoofing 
C)  Suspicious Activity Monitoring 
D)  Adaptive Threat Prevention 
A)  Block Port Overflow 
B)  Local Interface Spoofing 
C)  Suspicious Activity Monitoring 
D)  Adaptive Threat Prevention

Question 19

You believe Phase 2 negotiations are failing while you are attempting to configure a site-to-site VPN with one of your firm's business partners. Which SmartConsole application should you use to confirm your suspicious?

Accepted Answer

A)  SmartDashboard 
B)  SmartUpdate 
C)  SmartView Status 
D)  SmartView Tracker 
A)  SmartDashboard 
B)  SmartUpdate 
C)  SmartView Status 
D)  SmartView Tracker

Question 20

Provide very wide coverage for all products and protocols, with noticeable performance impact.   How could you tune the profile in order to lower the CPU load still maintaining security at good level? Select the BEST answer.

Accepted Answer

A)  Set High Confidence to Low and Low Confidence to Inactive. 
B)  Set the Performance Impact to Medium or lower. 
C)  The problem is not with the Threat Prevention Profile. Consider adding more memory to the appliance. 
D)  Set the Performance Impact to Very Low Confidence to Prevent. 
A)  Set High Confidence to Low and Low Confidence to Inactive. 
B)  Set the Performance Impact to Medium or lower. 
C)  The problem is not with the Threat Prevention Profile. Consider adding more memory to the appliance. 
D)  Set the Performance Impact to Very Low Confidence to Prevent.

What port is used for delivering logs from the gateway to the management server?

The tool _______ generates a R80 Security Gateway configuration report.

Review the following screenshot and select the BEST answer.

AdminA and AdminB are both logged in on SmartConsole. What does it mean if AdminB sees a lock icon on a rule? Choose the BEST answer.

Which remote Access Solution is clientless?

Fill in the blank: When LDAP is integrated with Check Point Security Management, it is then referred to as _______

AdminA and AdminB are both logged in on SmartConsole. What does it mean if AdminB sees a lock icon on a rule?

Fill in the blanks: A High Availability deployment is referred to as a cluster and a Load Sharing deployment is referred to as a __ cluster.

VPN gateways authenticate using _ and _ .

Fill in the blank: When a policy package is installed, ________ are also distributed to the target installation Security Gateways.

Which of the following is a new R80.10 Gateway feature that had not been available in R77.X and older?

In SmartConsole, objects are used to represent physical and virtual network components and also some logical components. These objects are divided into several categories. Which of the following is NOT an objects category?

What is the purpose of a Clean-up Rule?

Harriet wants to protect sensitive information from intentional loss when users browse to a specific URL: https://personal.mymail.com, which blade will she enable to achieve her goal?

What are the three conflict resolution rules in the Threat Prevention Policy Layers?

When you upload a package or license to the appropriate repository in SmartUpdate, where is the package or license stored

Fill in the blank: The R80 feature ________ permits blocking specific IP addresses for a specified time period.

You believe Phase 2 negotiations are failing while you are attempting to configure a site-to-site VPN with one of your firm's business partners. Which SmartConsole application should you use to confirm your suspicious?

Provide very wide coverage for all products and protocols, with noticeable performance impact. How could you tune the profile in order to lower the CPU load still maintaining security at good level? Select the BEST answer.

Check Point Certified Security Principles Associate (CCSPA)

Check Point Certified Security Expert - R80

Filters

Exam 2: Check Point Certified Security Administrator (CCSA R80)

What port is used for delivering logs from the gateway to the management server?

The tool _______ generates a R80 Security Gateway configuration report.

Review the following screenshot and select the BEST answer.

AdminA and AdminB are both logged in on SmartConsole. What does it mean if AdminB sees a lock icon on a rule? Choose the BEST answer.

Which remote Access Solution is clientless?

Fill in the blank: When LDAP is integrated with Check Point Security Management, it is then referred to as _______

AdminA and AdminB are both logged in on SmartConsole. What does it mean if AdminB sees a lock icon on a rule?

Fill in the blanks: A High Availability deployment is referred to as a ______ cluster and a Load Sharing deployment is referred to as a ________ cluster.

VPN gateways authenticate using ___________ and ___________ .

Fill in the blank: When a policy package is installed, ________ are also distributed to the target installation Security Gateways.

Which of the following is a new R80.10 Gateway feature that had not been available in R77.X and older?

In SmartConsole, objects are used to represent physical and virtual network components and also some logical components. These objects are divided into several categories. Which of the following is NOT an objects category?

What is the purpose of a Clean-up Rule?

Harriet wants to protect sensitive information from intentional loss when users browse to a specific URL: https://personal.mymail.com, which blade will she enable to achieve her goal?

What are the three conflict resolution rules in the Threat Prevention Policy Layers?

When you upload a package or license to the appropriate repository in SmartUpdate, where is the package or license stored

Fill in the blank: The R80 feature ________ permits blocking specific IP addresses for a specified time period.

You believe Phase 2 negotiations are failing while you are attempting to configure a site-to-site VPN with one of your firm's business partners. Which SmartConsole application should you use to confirm your suspicious?

Provide very wide coverage for all products and protocols, with noticeable performance impact. How could you tune the profile in order to lower the CPU load still maintaining security at good level? Select the BEST answer.

Check Point Certified Security Principles Associate (CCSPA)

Check Point Certified Security Expert - R80

Filters

Fill in the blanks: A High Availability deployment is referred to as a cluster and a Load Sharing deployment is referred to as a __ cluster.

VPN gateways authenticate using _ and _ .