Question 1

View the rule below. What does the lock-symbol in the left column mean? Select the BEST answer.

Accepted Answer

A)  The current administrator has read-only permissions to Threat Prevention Policy. 
B)  Another user has locked the rule for editing. 
C)  Configuration lock is present. Click the lock symbol to gain read-write access. 
D)  The current administrator is logged in as read-only because someone else is editing the policy. 
A)  The current administrator has read-only permissions to Threat Prevention Policy. 
B)  Another user has locked the rule for editing. 
C)  Configuration lock is present. Click the lock symbol to gain read-write access. 
D)  The current administrator is logged in as read-only because someone else is editing the policy.

Question 2

Which SmartConsole component can Administrators use to track changes to the Rule Base?

Accepted Answer

A)  WebUI 
B)  SmartView Tracker 
C)  SmartView Monitor 
D)  SmartReporter 
A)  WebUI 
B)  SmartView Tracker 
C)  SmartView Monitor 
D)  SmartReporter

Question 3

The organization's security manager wishes to back up just the Gaia operating system parameters. Which command can be used to back up only Gaia operating system parameters like interface details, Static routes and Proxy ARP entries?

Accepted Answer

A)  show configuration 
B)  backup 
C)  migrate export 
D)  upgrade export 
A)  show configuration 
B)  backup 
C)  migrate export 
D)  upgrade export

Question 4

You are the Check Point administrator for Alpha Corp. You received a call that one of the users is unable to browse the Internet on their new tablet which is connected to the company wireless, which goes through a Check Point Gateway. How would you review the logs to see what is blocking this traffic?

Accepted Answer

A)  Open SmartLog and connect remotely to the wireless controller 
B)  Open SmartEvent to see why they are being blocked 
C)  Open SmartDashboard and review the logs tab 
D)  Open SmartLog and filter for the IP address of the tablet 
A)  Open SmartLog and connect remotely to the wireless controller 
B)  Open SmartEvent to see why they are being blocked 
C)  Open SmartDashboard and review the logs tab 
D)  Open SmartLog and filter for the IP address of the tablet

Question 5

Choose the correct statement regarding Implicit Rules.

Accepted Answer

A)  To edit the Implicit rules you go to: Launch Button > Policy > Global Properties > Firewall. 
B)  Implied rules are fixed rules that you cannot change. 
C)  You can directly edit the Implicit rules by double-clicking on a specific Implicit rule. 
D)  You can edit the Implicit rules but only if requested by Check Point support personnel. 
A)  To edit the Implicit rules you go to: Launch Button > Policy > Global Properties > Firewall. 
B)  Implied rules are fixed rules that you cannot change. 
C)  You can directly edit the Implicit rules by double-clicking on a specific Implicit rule. 
D)  You can edit the Implicit rules but only if requested by Check Point support personnel.

Question 6

What is Consolidation Policy?

Accepted Answer

A)  The collective name of the Security Policy, Address Translation, and IPS Policies. 
B)  The specific Policy written in SmartDashboard to configure which log data is stored in the SmartReporter database. 
C)  The collective name of the logs generated by SmartReporter. 
D)  A global Policy used to share a common enforcement policy for multiple Security Gateways. 
A)  The collective name of the Security Policy, Address Translation, and IPS Policies. 
B)  The specific Policy written in SmartDashboard to configure which log data is stored in the SmartReporter database. 
C)  The collective name of the logs generated by SmartReporter. 
D)  A global Policy used to share a common enforcement policy for multiple Security Gateways.

Question 7

Which one of the following is the preferred licensing model? Select the Best answer.

Accepted Answer

A)  Local licensing because it ties the package license to the IP-address of the gateway and has no dependency of the Security Management Server. 
B)  Central licensing because it ties the package license to the IP-address of the Security Management Server and has no dependency of the gateway. 
C)  Local licensing because it ties the package license to the MAC-address of the gateway management interface and has no Security Management Server dependency. 
D)  Central licensing because it ties the package license to the MAC-address of the Security Management Server Mgmt-interface and has no dependency of the gateway. 
A)  Local licensing because it ties the package license to the IP-address of the gateway and has no dependency of the Security Management Server. 
B)  Central licensing because it ties the package license to the IP-address of the Security Management Server and has no dependency of the gateway. 
C)  Local licensing because it ties the package license to the MAC-address of the gateway management interface and has no Security Management Server dependency. 
D)  Central licensing because it ties the package license to the MAC-address of the Security Management Server Mgmt-interface and has no dependency of the gateway.

Question 8

You want to reset SIC between smberlin and sgosaka .   In SmartDashboard, you choose , Communication Reset . On , you start cpconfig , choose Secure Internal Communication and enter the new SIC Activation Key. The screen reads The SIC was successfully initialized and jumps back to the menu. When trying to establish a connection, instead of a working connection, you receive this error message:   What is the reason for this behavior?

Accepted Answer

A)  The Gateway was not rebooted, which is necessary to change the SIC key. 
B)  You must first initialize the Gateway object in SmartDashboard (i.e., right-click on the object, choose Basic Setup > Initialize ). You must first initialize the Gateway object in SmartDashboard (i.e., right-click on the object, choose Basic Setup > Initialize ). 
C)  The check Point services on the Gateway were not restarted because you are still in the cpconfig utility. The check Point services on the Gateway were not restarted because you are still in the utility. 
D)  The activation key contains letters that are on different keys on localized keyboards. Therefore, the activation can not be typed in a matching fashion. 
A)  The Gateway was not rebooted, which is necessary to change the SIC key. 
B)  You must first initialize the Gateway object in SmartDashboard (i.e., right-click on the object, choose Basic Setup > Initialize ). You must first initialize the Gateway object in SmartDashboard (i.e., right-click on the object, choose Basic Setup > Initialize ). 
C)  The check Point services on the Gateway were not restarted because you are still in the cpconfig utility. The check Point services on the Gateway were not restarted because you are still in the utility. 
D)  The activation key contains letters that are on different keys on localized keyboards. Therefore, the activation can not be typed in a matching fashion.

Question 9

Which of the following is NOT an integral part of VPN communication within a network?

Accepted Answer

A)  VPN key 
B)  VPN community 
C)  VPN trust entities 
D)  VPN domain 
A)  VPN key 
B)  VPN community 
C)  VPN trust entities 
D)  VPN domain

Question 10

By default, the SIC certificates issued by R80 Management Server are based on the ____________ algorithm.

Accepted Answer

A)  SHA-256 
B)  SHA-200 
C)  MD5 
D)  SHA-128 
A)  SHA-256 
B)  SHA-200 
C)  MD5 
D)  SHA-128

Question 11

Which R77 GUI would you use to see number of packets accepted since the last policy install?

Accepted Answer

A)  SmartView Monitor 
B)  SmartView Tracker 
C)  SmartDashboard 
D)  SmartView Status 
A)  SmartView Monitor 
B)  SmartView Tracker 
C)  SmartDashboard 
D)  SmartView Status

Question 12

After the initial installation the First Time Configuration Wizard should be run.

Accepted Answer

A)  First Time Configuration Wizard can be run from the Unified SmartConsole. 
B)  First Time Configuration Wizard can be run from the command line or from the WebUI. 
C)  First time Configuration Wizard can only be run from the WebUI. 
D)  Connection to the internet is required before running the First Time Configuration wizard. 
A)  First Time Configuration Wizard can be run from the Unified SmartConsole. 
B)  First Time Configuration Wizard can be run from the command line or from the WebUI. 
C)  First time Configuration Wizard can only be run from the WebUI. 
D)  Connection to the internet is required before running the First Time Configuration wizard.

Question 13

In R80, Unified Policy is a combination of

Accepted Answer

A)  Access control policy, QoS Policy, Desktop Security Policy and endpoint policy. 
B)  Access control policy, QoS Policy, Desktop Security Policy and Threat Prevention Policy. 
C)  Firewall policy, address Translation and application and URL filtering, QoS Policy, Desktop Security Policy and Threat Prevention Policy. 
D)  Access control policy, QoS Policy, Desktop Security Policy and VPN policy. 
A)  Access control policy, QoS Policy, Desktop Security Policy and endpoint policy. 
B)  Access control policy, QoS Policy, Desktop Security Policy and Threat Prevention Policy. 
C)  Firewall policy, address Translation and application and URL filtering, QoS Policy, Desktop Security Policy and Threat Prevention Policy. 
D)  Access control policy, QoS Policy, Desktop Security Policy and VPN policy.

Question 14

After the initial installation the First Time Configuration Wizard should be run. Select the BEST answer.

Accepted Answer

A)  First Time Configuration Wizard can be run from the Unified SmartConsole. 
B)  First Time Configuration Wizard can be run from the command line or from the WebUI. 
C)  First time Configuration Wizard can only be run from the WebUI. 
D)  Connection to the internet is required before running the First Time Configuration wizard. 
A)  First Time Configuration Wizard can be run from the Unified SmartConsole. 
B)  First Time Configuration Wizard can be run from the command line or from the WebUI. 
C)  First time Configuration Wizard can only be run from the WebUI. 
D)  Connection to the internet is required before running the First Time Configuration wizard.

Question 15

Gaia can be configured using the _______ or ______ .

Accepted Answer

A)  GaiaUI; command line interface 
B)  WebUI; Gaia Interface 
C)  Command line interface; WebUI 
D)  Gaia Interface; GaiaUI 
A)  GaiaUI; command line interface 
B)  WebUI; Gaia Interface 
C)  Command line interface; WebUI 
D)  Gaia Interface; GaiaUI

Question 16

RADIUS protocol uses ______ to communicate with the gateway.

Accepted Answer

A)  UDP 
B)  TDP 
C)  CCP 
D)  HTTP 
A)  UDP 
B)  TDP 
C)  CCP 
D)  HTTP

Question 17

Which of the following firewall modes DOES NOT allow for Identity Awareness to be deployed?

Accepted Answer

A)  Bridge 
B)  Load Sharing 
C)  High Availability 
D)  Fail Open 
A)  Bridge 
B)  Load Sharing 
C)  High Availability 
D)  Fail Open

Question 18

In Logging and Monitoring, the tracking options are Log, Detailed Log and Extended Log. Which of the following options can you add to each Log, Detailed Log and Extended Log?

Accepted Answer

A)  Accounting 
B)  Suppression 
C)  Accounting/Suppression 
D)  Accounting/Extended 
A)  Accounting 
B)  Suppression 
C)  Accounting/Suppression 
D)  Accounting/Extended

Question 19

Choose the SmartLog property that is TRUE.

Accepted Answer

A)  SmartLog has been an option since release R71.10. 
B)  SmartLog is not a Check Point product. 
C)  SmartLog and SmartView Tracker are mutually exclusive. 
D)  SmartLog is a client of SmartConsole that enables enterprises to centrally track log records and security activity with Google-like search. 
A)  SmartLog has been an option since release R71.10. 
B)  SmartLog is not a Check Point product. 
C)  SmartLog and SmartView Tracker are mutually exclusive. 
D)  SmartLog is a client of SmartConsole that enables enterprises to centrally track log records and security activity with Google-like search.

Question 20

What is Identity Sharing?

Accepted Answer

A)  Management servers can acquire and share identities with Security Gateways 
B)  Users can share identities with other users 
C)  Security Gateways can acquire and share identities with other Security Gateways 
D)  Administrators can share identifies with other administrators 
A)  Management servers can acquire and share identities with Security Gateways 
B)  Users can share identities with other users 
C)  Security Gateways can acquire and share identities with other Security Gateways 
D)  Administrators can share identifies with other administrators

View the rule below. What does the lock-symbol in the left column mean? Select the BEST answer.

Which SmartConsole component can Administrators use to track changes to the Rule Base?

The organization's security manager wishes to back up just the Gaia operating system parameters. Which command can be used to back up only Gaia operating system parameters like interface details, Static routes and Proxy ARP entries?

Choose the correct statement regarding Implicit Rules.

What is Consolidation Policy?

Which one of the following is the preferred licensing model? Select the Best answer.

Which of the following is NOT an integral part of VPN communication within a network?

By default, the SIC certificates issued by R80 Management Server are based on the ____________ algorithm.

Which R77 GUI would you use to see number of packets accepted since the last policy install?

After the initial installation the First Time Configuration Wizard should be run.

In R80, Unified Policy is a combination of

After the initial installation the First Time Configuration Wizard should be run. Select the BEST answer.

Gaia can be configured using the _ or .

RADIUS protocol uses ______ to communicate with the gateway.

Which of the following firewall modes DOES NOT allow for Identity Awareness to be deployed?

In Logging and Monitoring, the tracking options are Log, Detailed Log and Extended Log. Which of the following options can you add to each Log, Detailed Log and Extended Log?

Choose the SmartLog property that is TRUE.

What is Identity Sharing?

Check Point Certified Security Principles Associate (CCSPA)

Check Point Certified Security Expert - R80

Filters

Exam 2: Check Point Certified Security Administrator (CCSA R80)

View the rule below. What does the lock-symbol in the left column mean? Select the BEST answer.

Which SmartConsole component can Administrators use to track changes to the Rule Base?

The organization's security manager wishes to back up just the Gaia operating system parameters. Which command can be used to back up only Gaia operating system parameters like interface details, Static routes and Proxy ARP entries?

Choose the correct statement regarding Implicit Rules.

What is Consolidation Policy?

Which one of the following is the preferred licensing model? Select the Best answer.

Which of the following is NOT an integral part of VPN communication within a network?

By default, the SIC certificates issued by R80 Management Server are based on the ____________ algorithm.

Which R77 GUI would you use to see number of packets accepted since the last policy install?

After the initial installation the First Time Configuration Wizard should be run.

In R80, Unified Policy is a combination of

After the initial installation the First Time Configuration Wizard should be run. Select the BEST answer.

Gaia can be configured using the _______ or ______ .

RADIUS protocol uses ______ to communicate with the gateway.

Which of the following firewall modes DOES NOT allow for Identity Awareness to be deployed?

In Logging and Monitoring, the tracking options are Log, Detailed Log and Extended Log. Which of the following options can you add to each Log, Detailed Log and Extended Log?

Choose the SmartLog property that is TRUE.

What is Identity Sharing?

Check Point Certified Security Principles Associate (CCSPA)

Check Point Certified Security Expert - R80

Filters

Gaia can be configured using the _ or .