Exam 2: Check Point Certified Security Administrator (CCSA R80)

On the following picture an administrator configures Identity Awareness: After clicking "Next" the above configuration is supported by:

Fill in the blank: A _______ is used by a VPN gateway to send traffic as if it were a physical interface.

By default, which port does the WebUI listen on?

Which of the following is NOT a SecureXL traffic flow?

What are the three deployment considerations for a secure network?

Which Identity Source(s) should be selected in Identity Awareness for when there is a requirement for a higher level of security for sensitive servers?

Fill in the bank: In Office mode, a Security Gateway assigns a remote client to an IP address once___________.

You are using SmartView Tracker to troubleshoot NAT entries. Which column do you check to view the NAT'd source port if you are using Source NAT?

When attempting to start a VPN tunnel, in the logs the error 'no proposal chosen' is seen numerous times. No other VPN-related log entries are present. Which phase of the VPN negotiations has failed?

Each cluster, at a minimum, should have at least ___________ interfaces.

Which of the following uses the same key to decrypt as it does to encrypt?

Which pre-defined Permission Profile should be assigned to an administrator that requires full access to audit all configurations without modifying them?

What is the BEST method to deploy Identity Awareness for roaming users?

Fill in the blank: Gaia can be configured using the _______ or ______ .

In SmartConsole, objects are used to represent physical and virtual network components and also some logical components. These objects are divided into several categories. Which of the following is NOT an objects category?

You manage a global network extending from your base in Chicago to Tokyo, Calcutta and Dallas. Management wants a report detailing the current software level of each Enterprise class Security Gateway. You plan to take the opportunity to create a proposal outline, listing the most cost-effective way to upgrade your Gateways. Which two SmartConsole applications will you use to create this report and outline?

While enabling the Identity Awareness blade the Identity Awareness wizard does not automatically detect the windows domain. Why does it not detect the windows domain?

Which command shows the installed licenses?

Fill in the blank: Browser-based Authentication sends users to a web page to acquire identities using ________ .

Match the following commands to their correct function. Each command has one function only listed.