Exam 2: Check Point Certified Security Administrator (CCSA R80)

Fill in the blanks: A security Policy is created in _________ , stored in the _________ , and Distributed to the various __________ .

Which of the following is a hash algorithm?

Administrator Dave logs into R80 Management Server to review and makes some rule changes. He notices that there is a padlock sign next to the DNS rule in the Rule Base. What is the possible explanation for this?

True or False: The destination server for Security Gateway logs depends on a Security Management Server configuration.

Fill in the blank: The R80 SmartConsole, SmartEvent GUI client, and _______ consolidate billions of logs and shows them as prioritized security events.

You work as a security administrator for a large company. The CSO of your company has attended a security conference where he has learned how hackers constantly modify their strategies and techniques to evade detection and reach corporate resources. He wants to make sure that his company has the right protections in place. Check Point has been selected for the security vendor. Which Check Point product protects BEST against malware and zero-day attacks while ensuring quick delivery of safe content to your users?

An identity server uses a ___________ for user authentication.

How many layers make up the TCP/IP model?

When a Security Gateways sends its logs to an IP address other than its own, which deployment option is installed?

Which type of Endpoint Identity Agent includes packet tagging and computer authentication?

Which Check Point supported authentication scheme typically requires a user to possess a token?

In a Distributed Environment, a Central License can be installed via CLI on a Security Gateway

Under which file is the proxy arp configuration stored?

You want to define a selected administrator's permission to edit a layer. However, when you click the + sign in the "Select additional profile that will be able edit this layer" you do not see anything. What is the most likely cause of this problem? Select the BEST answer.

The SIC Status "Unknown" means

Which option will match a connection regardless of its association with a VPN community?

In order to modify Security Policies the administrator can use which of the following tools? Select the BEST answer.

Fill in the blank: Back up and restores can be accomplished through_________.

Which of the following commands can be used to remove site-to-site IPSEC Security Associations (SA)?

If there is an Accept Implied Policy set to "First", what is the reason Jorge cannot see any logs?