Question 1

In the R80 SmartConsole, on which tab are Permissions and Administrators defined?

Accepted Answer

A)  Security Policies 
B)  Logs and Monitor 
C)  Manage and Settings 
D)  Gateway and Servers 
A)  Security Policies 
B)  Logs and Monitor 
C)  Manage and Settings 
D)  Gateway and Servers

Question 2

Fill in the blank: The R80 utility fw monitor is used to troubleshoot _____________

Accepted Answer

A)  User data base corruption 
B)  LDAP conflicts 
C)  Traffic issues 
D)  Phase two key negotiation 
A)  User data base corruption 
B)  LDAP conflicts 
C)  Traffic issues 
D)  Phase two key negotiation

Question 3

When LDAP is integrated with Check Point Security Management, it is then referred to as _______

Accepted Answer

A)  UserCheck 
B)  User Directory 
C)  User Administration 
D)  User Center 
A)  UserCheck 
B)  User Directory 
C)  User Administration 
D)  User Center

Question 4

The IT Management team is interested in the new features of the Check Point R80 Management and wants to upgrade but they are concerned that the existing R77.30 Gaia Gateways cannot be managed by R80 because it is so different. As the administrator responsible for the Firewalls, how can you answer or confirm these concerns?

Accepted Answer

A)  R80 Management contains compatibility packages for managing earlier versions of Check Point Gateways prior to R80. Consult the R80 Release Notes for more information. 
B)  R80 Management requires the separate installation of compatibility hotfix packages for managing the earlier versions of Check Point Gateways prior to R80. Consult the R80 Release Notes for more information. 
C)  R80 Management was designed as a completely different Management system and so can only monitor Check Point Gateways prior to R80. 
D)  R80 Management cannot manage earlier versions of Check Point Gateways prior to R80. Only R80 and above Gateways can be managed. Consult the R80 Release Notes for more information. 
A)  R80 Management contains compatibility packages for managing earlier versions of Check Point Gateways prior to R80. Consult the R80 Release Notes for more information. 
B)  R80 Management requires the separate installation of compatibility hotfix packages for managing the earlier versions of Check Point Gateways prior to R80. Consult the R80 Release Notes for more information. 
C)  R80 Management was designed as a completely different Management system and so can only monitor Check Point Gateways prior to R80. 
D)  R80 Management cannot manage earlier versions of Check Point Gateways prior to R80. Only R80 and above Gateways can be managed. Consult the R80 Release Notes for more information.

Question 5

Which statement is TRUE of anti-spoofing?

Accepted Answer

A)  Anti-spoofing is not needed when IPS software blade is enabled 
B)  It is more secure to create anti-spoofing groups manually 
C)  It is BEST Practice to have anti-spoofing groups in sync with the routing table 
D)  With dynamic routing enabled, anti-spoofing groups are updated automatically whenever there is a routing change 
A)  Anti-spoofing is not needed when IPS software blade is enabled 
B)  It is more secure to create anti-spoofing groups manually 
C)  It is BEST Practice to have anti-spoofing groups in sync with the routing table 
D)  With dynamic routing enabled, anti-spoofing groups are updated automatically whenever there is a routing change

Question 6

How Capsule Connect and Capsule Workspace differ?

Accepted Answer

A)  Capsule Connect provides a Layer3 VPN. Capsule Workspace provides a Desktop with usable applications 
B)  Capsule Workspace can provide access to any application 
C)  Capsule Connect provides Business data isolation 
D)  Capsule Connect does not require an installed application at client 
A)  Capsule Connect provides a Layer3 VPN. Capsule Workspace provides a Desktop with usable applications 
B)  Capsule Workspace can provide access to any application 
C)  Capsule Connect provides Business data isolation 
D)  Capsule Connect does not require an installed application at client

Question 7

The CPD daemon is a Firewall Kernel Process that does NOT do which of the following?

Accepted Answer

A)  Secure Internal Communication (SI
C)  
B)  Restart Daemons if they fail 
C)  Transfer messages between Firewall processes 
D)  Pulls application monitoring status 
A)  Secure Internal Communication (SI
C)  
B)  Restart Daemons if they fail 
C)  Transfer messages between Firewall processes 
D)  Pulls application monitoring status

Question 8

Which key is created during Phase 2 of a site-to-site VPN?

Accepted Answer

A)  Pre-shared secret 
B)  Diffie-Hellman Public Key 
C)  Symmetrical IPSec key 
D)  Diffie-Hellman Private Key 
A)  Pre-shared secret 
B)  Diffie-Hellman Public Key 
C)  Symmetrical IPSec key 
D)  Diffie-Hellman Private Key

Question 9

Check Point ClusterXL Active/Active deployment is used when:

Accepted Answer

A)  Only when there is Multicast solution set up 
B)  There is Load Sharing solution set up 
C)  Only when there is Unicast solution set up 
D)  There is High Availability solution set up 
A)  Only when there is Multicast solution set up 
B)  There is Load Sharing solution set up 
C)  Only when there is Unicast solution set up 
D)  There is High Availability solution set up

Question 10

Which of the following is NOT an attribute of packer acceleration?

Accepted Answer

A)  Source address 
B)  Protocol 
C)  Destination port 
D)  Application Awareness 
A)  Source address 
B)  Protocol 
C)  Destination port 
D)  Application Awareness

Question 11

To create policy for traffic to or from a particular location, use the _____________.

Accepted Answer

A)  DLP shared policy 
B)  Geo policy shared policy 
C)  Mobile Access software blade 
D)  HTTPS inspection 
A)  DLP shared policy 
B)  Geo policy shared policy 
C)  Mobile Access software blade 
D)  HTTPS inspection

Question 12

Which directory holds the SmartLog index files by default?

Accepted Answer

A)  $SMARTLOGDIR/data 
B)  $SMARTLOG/dir 
C)  $FWDIR/smartlog 
D)  $FWDIR/log 
A)  $SMARTLOGDIR/data 
B)  $SMARTLOG/dir 
C)  $FWDIR/smartlog 
D)  $FWDIR/log

Question 13

Web Control Layer has been set up using the settings in the following dialogue:   Consider the following policy and select the BEST answer.

Accepted Answer

A)  Traffic that does not match any rule in the subpolicy is dropped. 
B)  All employees can access only Youtube and Vimeo. 
C)  Access to Youtube and Vimeo is allowed only once a day. 
D)  Anyone from internal network can access the internet, expect the traffic defined in drop rules 5.2, 5.5 and 5.6. 
A)  Traffic that does not match any rule in the subpolicy is dropped. 
B)  All employees can access only Youtube and Vimeo. 
C)  Access to Youtube and Vimeo is allowed only once a day. 
D)  Anyone from internal network can access the internet, expect the traffic defined in drop rules 5.2, 5.5 and 5.6.

Question 14

Where can administrator edit a list of trusted SmartConsole clients in R80?

Accepted Answer

A)  cpconfig on a Security Management Server, in the WebUI logged into a Security Management Server. cpconfig on a Security Management Server, in the WebUI logged into a Security Management Server. 
B)  Only using SmartConsole: Manage and Settings > Permissions and Administrators > Advanced > Trusted Clients. 
C)  In cpconfig on a Security Management Server, in the WebUI logged into a Security Management Server, in SmartConsole: Manage and Settings > Permissions and Administrators > Advanced > Trusted Clients . In on a Security Management Server, in the WebUI logged into a Security Management Server, in SmartConsole: Manage and Settings > Permissions and Administrators Advanced Trusted Clients . 
D)  WebUI client logged to Security Management Server, SmartDashboard: Manage and Settings > Permissions and Administrators > Advanced > Trusted Clients , via cpconfig on a Security Gateway. WebUI client logged to Security Management Server, SmartDashboard: , via on a Security Gateway. 
A)  cpconfig on a Security Management Server, in the WebUI logged into a Security Management Server. cpconfig on a Security Management Server, in the WebUI logged into a Security Management Server. 
B)  Only using SmartConsole: Manage and Settings > Permissions and Administrators > Advanced > Trusted Clients. 
C)  In cpconfig on a Security Management Server, in the WebUI logged into a Security Management Server, in SmartConsole: Manage and Settings > Permissions and Administrators > Advanced > Trusted Clients . In on a Security Management Server, in the WebUI logged into a Security Management Server, in SmartConsole: Manage and Settings > Permissions and Administrators Advanced Trusted Clients . 
D)  WebUI client logged to Security Management Server, SmartDashboard: Manage and Settings > Permissions and Administrators > Advanced > Trusted Clients , via cpconfig on a Security Gateway. WebUI client logged to Security Management Server, SmartDashboard: , via on a Security Gateway.

Question 15

To view the policy installation history for each gateway, which Access Tool in SmartConsole would an administrator use?

Accepted Answer

A)  Revision History 
B)  Gateway installations 
C)  Installation history 
D)  Gateway history 
A)  Revision History 
B)  Gateway installations 
C)  Installation history 
D)  Gateway history

Question 16

As you review this Security Policy, what changes could you make to accommodate Rule 4?

Accepted Answer

A)  Remove the service HTTP from the column Service in Rule 4. Remove the service HTTP from the column Service in Rule 4. 
B)  Modify the column VPN in Rule 2 to limit access to specific traffic. Modify the column VPN in Rule 2 to limit access to specific traffic. 
C)  Nothing at all 
D)  Modify the columns Source or Destination in Rule 4 Modify the columns Source or Destination in Rule 4 
A)  Remove the service HTTP from the column Service in Rule 4. Remove the service HTTP from the column Service in Rule 4. 
B)  Modify the column VPN in Rule 2 to limit access to specific traffic. Modify the column VPN in Rule 2 to limit access to specific traffic. 
C)  Nothing at all 
D)  Modify the columns Source or Destination in Rule 4 Modify the columns Source or Destination in Rule 4

In the R80 SmartConsole, on which tab are Permissions and Administrators defined?

Fill in the blank: The R80 utility fw monitor is used to troubleshoot _____________

When LDAP is integrated with Check Point Security Management, it is then referred to as _______

Which statement is TRUE of anti-spoofing?

How Capsule Connect and Capsule Workspace differ?

The CPD daemon is a Firewall Kernel Process that does NOT do which of the following?

Which key is created during Phase 2 of a site-to-site VPN?

Check Point ClusterXL Active/Active deployment is used when:

Which of the following is NOT an attribute of packer acceleration?

To create policy for traffic to or from a particular location, use the _____________.

Which directory holds the SmartLog index files by default?

Web Control Layer has been set up using the settings in the following dialogue: Consider the following policy and select the BEST answer.

Where can administrator edit a list of trusted SmartConsole clients in R80?

To view the policy installation history for each gateway, which Access Tool in SmartConsole would an administrator use?

As you review this Security Policy, what changes could you make to accommodate Rule 4?

Check Point Certified Security Principles Associate (CCSPA)

Check Point Certified Security Expert - R80

Filters

Exam 2: Check Point Certified Security Administrator (CCSA R80)

In the R80 SmartConsole, on which tab are Permissions and Administrators defined?

Fill in the blank: The R80 utility fw monitor is used to troubleshoot _____________

When LDAP is integrated with Check Point Security Management, it is then referred to as _______

Which statement is TRUE of anti-spoofing?

How Capsule Connect and Capsule Workspace differ?

The CPD daemon is a Firewall Kernel Process that does NOT do which of the following?

Which key is created during Phase 2 of a site-to-site VPN?

Check Point ClusterXL Active/Active deployment is used when:

Which of the following is NOT an attribute of packer acceleration?

To create policy for traffic to or from a particular location, use the _____________.

Which directory holds the SmartLog index files by default?

Web Control Layer has been set up using the settings in the following dialogue: Consider the following policy and select the BEST answer.

Where can administrator edit a list of trusted SmartConsole clients in R80?

To view the policy installation history for each gateway, which Access Tool in SmartConsole would an administrator use?

As you review this Security Policy, what changes could you make to accommodate Rule 4?

Check Point Certified Security Principles Associate (CCSPA)

Check Point Certified Security Expert - R80

Filters