Question 1

R80 Security Management Server can be installed on which of the following operating systems?

Accepted Answer

A)  Gaia only 
B)  Gaia, SPLAT, Windows Server only 
C)  Gaia, SPLAT, Windows Server and IPSO only 
D)  Gaia and SPLAT only 
A)  Gaia only 
B)  Gaia, SPLAT, Windows Server only 
C)  Gaia, SPLAT, Windows Server and IPSO only 
D)  Gaia and SPLAT only

Question 2

The Application Layer Firewalls inspect traffic through the ________ layer(s) of the TCP/IP model and up to and including the ________ layer.

Accepted Answer

A)  Lower; Application 
B)  First two; Internet 
C)  First two; Transport 
D)  Upper; Application 
A)  Lower; Application 
B)  First two; Internet 
C)  First two; Transport 
D)  Upper; Application

Question 3

Bob and Joe both have Administrator Roles on their Gaia Platform. Bob logs in on the WebUI and then Joe logs in through CLI. Choose what BEST describes the following scenario, where Bob and Joe are both logged in:

Accepted Answer

A)  When Joe logs in, Bob will be logged out automatically. 
B)  Since they both are logged in on different interfaces, they both will be able to make changes. 
C)  The database will be locked by Bob and Joe will not be able to make any changes. 
D)  Bob will receive a prompt that Joe logged in. 
A)  When Joe logs in, Bob will be logged out automatically. 
B)  Since they both are logged in on different interfaces, they both will be able to make changes. 
C)  The database will be locked by Bob and Joe will not be able to make any changes. 
D)  Bob will receive a prompt that Joe logged in.

Question 4

When Identity Awareness is enabled, which identity source(s) is(are) used for Application Control?

Accepted Answer

A)  RADIUS 
B)  Remote Access and RADIUS 
C)  All of the above 
D)  AD Query and Browser-based Authentication 
A)  RADIUS 
B)  Remote Access and RADIUS 
C)  All of the above 
D)  AD Query and Browser-based Authentication

Question 5

Fill in the blank: By default, the SIC certificates issued by R80 Management Server are based on the ____________ algorithm.

Accepted Answer

A)  SHA-256 
B)  SHA-200 
C)  MD5 
D)  SHA-128 
A)  SHA-256 
B)  SHA-200 
C)  MD5 
D)  SHA-128

Question 6

Which of the following is NOT supported by Bridge Mode Check Point Security Gateway

Accepted Answer

A)  Antivirus 
B)  Data Loss Prevention 
C)  NAT 
D)  Application Control 
A)  Antivirus 
B)  Data Loss Prevention 
C)  NAT 
D)  Application Control

Question 7

Fill in the blank: When a policy package is installed, ________ are also distributed to the target installation Security Gateways.

Accepted Answer

A)  Both User and Objects databases 
B)  Network databases only 
C)  Objects databases only 
D)  User databases only 
A)  Both User and Objects databases 
B)  Network databases only 
C)  Objects databases only 
D)  User databases only

Question 8

How is communication between different Check Point components secured in R80?

Accepted Answer

A)  By using IPSEC 
B)  By using SIC 
C)  By using ICA 
D)  By using 3DES 
A)  By using IPSEC 
B)  By using SIC 
C)  By using ICA 
D)  By using 3DES

Question 9

Traffic from source 192.168.1.1 is going to www.google.com. The Application Control Blade on the gateway is inspecting the traffic. Assuming acceleration is enable which path is handling the traffic?

Accepted Answer

A)  Slow Path 
B)  Medium Path 
C)  Fast Path 
D)  Accelerated Path 
A)  Slow Path 
B)  Medium Path 
C)  Fast Path 
D)  Accelerated Path

Question 10

Fill in the blank: The _________ software blade enables Application Security policies to allow, block, or limit website access based on user, group, and machine identities.

Accepted Answer

A)  Application Control 
B)  Data Awareness 
C)  URL Filtering 
D)  Threat Emulation 
A)  Application Control 
B)  Data Awareness 
C)  URL Filtering 
D)  Threat Emulation

Question 11

Due to high CPU workload on the Security Gateway, the security administrator decided to purchase a new multicore CPU to replace the existing single core CPU. After installation, is the administrator required to perform any additional tasks?

Accepted Answer

A)  Go to clash-Run cpstop | Run cpstart 
B)  Go to clash-Run cpconfig | Configure CoreXL to make use of the additional Cores | Exit cpconfig | Reboot Security Gateway 
C)  Administrator does not need to perform any task. Check Point will make use of the newly installed CPU and Cores 
D)  Go to clash-Run cpconfig | Configure CoreXL to make use of the additional Cores | Exit cpconfig | Reboot Security Gateway | Install Security Policy 
A)  Go to clash-Run cpstop | Run cpstart 
B)  Go to clash-Run cpconfig | Configure CoreXL to make use of the additional Cores | Exit cpconfig | Reboot Security Gateway 
C)  Administrator does not need to perform any task. Check Point will make use of the newly installed CPU and Cores 
D)  Go to clash-Run cpconfig | Configure CoreXL to make use of the additional Cores | Exit cpconfig | Reboot Security Gateway | Install Security Policy

Question 12

In ____________ NAT, the ____________ is translated.

Accepted Answer

A)  Hide; source 
B)  Static; source 
C)  Simple; source 
D)  Hide; destination 
A)  Hide; source 
B)  Static; source 
C)  Simple; source 
D)  Hide; destination

Question 13

You want to define a selected administrator's permission to edit a layer. However, when you click the + sign in the "Select additional profile that will be able edit this layer" you do not see anything. What is the most likely cause of this problem?

Accepted Answer

A)  "Edit layers by Software Blades" is unselected in the Administrator Permission Profile 
B)  There are no Administrator Permission Profiles available and you need to create one first. 
C)  All Administrator Permission Profiles are in use. 
D)  There are no Administrator Permission Profiles defined with limited access privileges. 
A)  "Edit layers by Software Blades" is unselected in the Administrator Permission Profile 
B)  There are no Administrator Permission Profiles available and you need to create one first. 
C)  All Administrator Permission Profiles are in use. 
D)  There are no Administrator Permission Profiles defined with limited access privileges.

Question 14

From SecureXL perspective, what are the tree paths of traffic flow:

Accepted Answer

A)  Initial Path; Medium Path; Accelerated Path 
B)  Layer Path; Blade Path; Rule Path 
C)  Firewall Path; Accept Path; Drop Path 
D)  Firewall Path; Accelerated Path; Medium Path 
A)  Initial Path; Medium Path; Accelerated Path 
B)  Layer Path; Blade Path; Rule Path 
C)  Firewall Path; Accept Path; Drop Path 
D)  Firewall Path; Accelerated Path; Medium Path

Question 15

What is UserCheck?

Accepted Answer

A)  Messaging tool user to verify a user's credentials 
B)  Communication tool used to inform a user about a website or application they are trying to access 
C)  Administrator tool used to monitor users on their network 
D)  Communication tool used to notify an administrator when a new user is created 
A)  Messaging tool user to verify a user's credentials 
B)  Communication tool used to inform a user about a website or application they are trying to access 
C)  Administrator tool used to monitor users on their network 
D)  Communication tool used to notify an administrator when a new user is created

Question 16

While enabling the Identity Awareness blade the Identity Awareness wizard does not automatically detect the windows domain. Why does it not detect the windows domain?

Accepted Answer

A)  Security Gateways is not part of the Domain 
B)  SmartConsole machine is not part of the domain 
C)  Security Management Server is not part of the domain 
D)  Identity Awareness is not enabled on Global properties 
A)  Security Gateways is not part of the Domain 
B)  SmartConsole machine is not part of the domain 
C)  Security Management Server is not part of the domain 
D)  Identity Awareness is not enabled on Global properties

Question 17

What is the purpose of Priority Delta in VRRP?

Accepted Answer

A)  When a box is up, Effective Priority = Priority + Priority Delta 
B)  When an Interface is up, Effective Priority = Priority + Priority Delta 
C)  When an Interface fails, Effective Priority = Priority - Priority Delta 
D)  When a box fails, Effective Priority = Priority - Priority Delta 
A)  When a box is up, Effective Priority = Priority + Priority Delta 
B)  When an Interface is up, Effective Priority = Priority + Priority Delta 
C)  When an Interface fails, Effective Priority = Priority - Priority Delta 
D)  When a box fails, Effective Priority = Priority - Priority Delta

Question 18

What Check Point tool is used to automatically update Check Point products for the Gaia OS?

Accepted Answer

A)  Check Point INSPECT Engine 
B)  Check Point Upgrade Service Engine 
C)  Check Point Update Engine 
D)  Check Point Upgrade Installation Service 
A)  Check Point INSPECT Engine 
B)  Check Point Upgrade Service Engine 
C)  Check Point Update Engine 
D)  Check Point Upgrade Installation Service

Question 19

Which of the following is NOT a VPN routing option available in a star community?

Accepted Answer

A)  To satellites through center only 
B)  To center, or through the center to other satellites, to Internet and other VPN targets 
C)  To center and to other satellites through center 
D)  To center only 
A)  To satellites through center only 
B)  To center, or through the center to other satellites, to Internet and other VPN targets 
C)  To center and to other satellites through center 
D)  To center only

Question 20

Once a certificate is revoked from the Security Gateway by the Security Management Server, the certificate information is _______.

Accepted Answer

A)  Sent to the Internal Certificate Authority. 
B)  Sent to the Security Administrator. 
C)  Stored on the Security Management Server. 
D)  Stored on the Certificate Revocation List. 
A)  Sent to the Internal Certificate Authority. 
B)  Sent to the Security Administrator. 
C)  Stored on the Security Management Server. 
D)  Stored on the Certificate Revocation List.

R80 Security Management Server can be installed on which of the following operating systems?

The Application Layer Firewalls inspect traffic through the layer(s) of the TCP/IP model and up to and including the layer.

Bob and Joe both have Administrator Roles on their Gaia Platform. Bob logs in on the WebUI and then Joe logs in through CLI. Choose what BEST describes the following scenario, where Bob and Joe are both logged in:

When Identity Awareness is enabled, which identity source(s) is(are) used for Application Control?

Fill in the blank: By default, the SIC certificates issued by R80 Management Server are based on the ____________ algorithm.

Which of the following is NOT supported by Bridge Mode Check Point Security Gateway

Fill in the blank: When a policy package is installed, ________ are also distributed to the target installation Security Gateways.

How is communication between different Check Point components secured in R80?

Traffic from source 192.168.1.1 is going to www.google.com. The Application Control Blade on the gateway is inspecting the traffic. Assuming acceleration is enable which path is handling the traffic?

Fill in the blank: The _________ software blade enables Application Security policies to allow, block, or limit website access based on user, group, and machine identities.

Due to high CPU workload on the Security Gateway, the security administrator decided to purchase a new multicore CPU to replace the existing single core CPU. After installation, is the administrator required to perform any additional tasks?

In NAT, the is translated.

You want to define a selected administrator's permission to edit a layer. However, when you click the + sign in the "Select additional profile that will be able edit this layer" you do not see anything. What is the most likely cause of this problem?

From SecureXL perspective, what are the tree paths of traffic flow:

What is UserCheck?

While enabling the Identity Awareness blade the Identity Awareness wizard does not automatically detect the windows domain. Why does it not detect the windows domain?

What is the purpose of Priority Delta in VRRP?

What Check Point tool is used to automatically update Check Point products for the Gaia OS?

Which of the following is NOT a VPN routing option available in a star community?

Once a certificate is revoked from the Security Gateway by the Security Management Server, the certificate information is _______.

Check Point Certified Security Principles Associate (CCSPA)

Check Point Certified Security Expert - R80

Filters

Exam 2: Check Point Certified Security Administrator (CCSA R80)

R80 Security Management Server can be installed on which of the following operating systems?

The Application Layer Firewalls inspect traffic through the ________ layer(s) of the TCP/IP model and up to and including the ________ layer.

Bob and Joe both have Administrator Roles on their Gaia Platform. Bob logs in on the WebUI and then Joe logs in through CLI. Choose what BEST describes the following scenario, where Bob and Joe are both logged in:

When Identity Awareness is enabled, which identity source(s) is(are) used for Application Control?

Fill in the blank: By default, the SIC certificates issued by R80 Management Server are based on the ____________ algorithm.

Which of the following is NOT supported by Bridge Mode Check Point Security Gateway

Fill in the blank: When a policy package is installed, ________ are also distributed to the target installation Security Gateways.

How is communication between different Check Point components secured in R80?

Traffic from source 192.168.1.1 is going to www.google.com. The Application Control Blade on the gateway is inspecting the traffic. Assuming acceleration is enable which path is handling the traffic?

Fill in the blank: The _________ software blade enables Application Security policies to allow, block, or limit website access based on user, group, and machine identities.

Due to high CPU workload on the Security Gateway, the security administrator decided to purchase a new multicore CPU to replace the existing single core CPU. After installation, is the administrator required to perform any additional tasks?

In ____________ NAT, the ____________ is translated.

You want to define a selected administrator's permission to edit a layer. However, when you click the + sign in the "Select additional profile that will be able edit this layer" you do not see anything. What is the most likely cause of this problem?

From SecureXL perspective, what are the tree paths of traffic flow:

What is UserCheck?

While enabling the Identity Awareness blade the Identity Awareness wizard does not automatically detect the windows domain. Why does it not detect the windows domain?

What is the purpose of Priority Delta in VRRP?

What Check Point tool is used to automatically update Check Point products for the Gaia OS?

Which of the following is NOT a VPN routing option available in a star community?

Once a certificate is revoked from the Security Gateway by the Security Management Server, the certificate information is _______.

Check Point Certified Security Principles Associate (CCSPA)

Check Point Certified Security Expert - R80

Filters

The Application Layer Firewalls inspect traffic through the layer(s) of the TCP/IP model and up to and including the layer.

In NAT, the is translated.