Question 1

What is mandatory for ClusterXL to work properly?

Accepted Answer

A)  The number of cores must be the same on every participating cluster node 
B)  The Magic MAC number must be unique per cluster node 
C)  The Sync interface must not have an IP address configured 
D)  If you have "Non-monitored Private" interfaces, the number of those interfaces must be the same on all cluster members 
A)  The number of cores must be the same on every participating cluster node 
B)  The Magic MAC number must be unique per cluster node 
C)  The Sync interface must not have an IP address configured 
D)  If you have "Non-monitored Private" interfaces, the number of those interfaces must be the same on all cluster members B

Question 2

Which features are only supported with R80.10 Gateways but not R77.x?

Accepted Answer

A)  Access Control policy unifies the Firewall, Application Control & URL Filtering, Data Awareness, and Mobile Access Software Blade policies 
B)  Limits the upload and download throughput for streaming media in the company to 1 Gbps. 
C)  The rule base can be built of layers, each containing a set of the security rules. Layers are inspected in the order in which they are defined, allowing control over the rule base flow and which security functionalities take precedence. 
D)  Time object to a rule to make the rule active only during specified times. 
A)  Access Control policy unifies the Firewall, Application Control & URL Filtering, Data Awareness, and Mobile Access Software Blade policies 
B)  Limits the upload and download throughput for streaming media in the company to 1 Gbps. 
C)  The rule base can be built of layers, each containing a set of the security rules. Layers are inspected in the order in which they are defined, allowing control over the rule base flow and which security functionalities take precedence. 
D)  Time object to a rule to make the rule active only during specified times. C

Question 3

Installations and upgrades with CPUSE require that the CPUSE agent is up-to-date. Usually the latest build is downloaded automatically. How can you verify the CPUSE agent build?

Accepted Answer

A)  In WebUI Status and Actions page or by running the following command in CLISH: show installer status build 
B)  In WebUI Status and Actions page or by running the following command in CLISH: show installer status version 
C)  In the Management Server or Gateway object in SmartConsole or by running the following command in CLISH: show installer status build 
D)  In the Management Server or Gateway object in SmartConsole or by running the following command in CLISH: show installer agent 
A)  In WebUI Status and Actions page or by running the following command in CLISH: show installer status build 
B)  In WebUI Status and Actions page or by running the following command in CLISH: show installer status version 
C)  In the Management Server or Gateway object in SmartConsole or by running the following command in CLISH: show installer status build 
D)  In the Management Server or Gateway object in SmartConsole or by running the following command in CLISH: show installer agent A

Question 4

Which statement is true regarding redundancy?

Accepted Answer

A)  System Administrators know their cluster has failed over and can also see why it failed over by using the cphaprob -f if command. 
B)  ClusterXL offers three different Load Sharing solutions: Unicast, Broadcast, and Multicast. 
C)  Machines in a ClusterXL High Availability configuration must be synchronized. 
D)  Both ClusterXL and VRRP are fully supported by Gaia and available to all Check Point appliances, open servers, and virtualized environments. 
A)  System Administrators know their cluster has failed over and can also see why it failed over by using the cphaprob -f if command. 
B)  ClusterXL offers three different Load Sharing solutions: Unicast, Broadcast, and Multicast. 
C)  Machines in a ClusterXL High Availability configuration must be synchronized. 
D)  Both ClusterXL and VRRP are fully supported by Gaia and available to all Check Point appliances, open servers, and virtualized environments.

Question 5

What feature allows Remote-access VPN users to access resources across a site-to-site VPN tunnel?

Accepted Answer

A)  Specific VPN Communities 
B)  Remote Access VPN Switch 
C)  Mobile Access VPN Domain 
D)  Network Access VPN Domain 
A)  Specific VPN Communities 
B)  Remote Access VPN Switch 
C)  Mobile Access VPN Domain 
D)  Network Access VPN Domain

Question 6

When gathering information about a gateway using CPINFO, what information is included or excluded when using the "-x" parameter?

Accepted Answer

A)  Includes the registry 
B)  Gets information about the specified Virtual System 
C)  Does not resolve network addresses 
D)  Output excludes connection table 
A)  Includes the registry 
B)  Gets information about the specified Virtual System 
C)  Does not resolve network addresses 
D)  Output excludes connection table

Question 7

What is the best sync method in the ClusterXL deployment?

Accepted Answer

A)  Use 1 cluster + 1st sync 
B)  Use 1 dedicated sync interface 
C)  Use 3 clusters + 1st sync + 2nd sync + 3rd sync 
D)  Use 2 clusters +1st sync + 2nd sync 
A)  Use 1 cluster + 1st sync 
B)  Use 1 dedicated sync interface 
C)  Use 3 clusters + 1st sync + 2nd sync + 3rd sync 
D)  Use 2 clusters +1st sync + 2nd sync

Question 8

What are the available options for downloading Check Point hotfixes in Gaia WebUI (CPUSE)?

Accepted Answer

A)  Manually, Scheduled, Automatic 
B)  Manually, Automatic, Disabled 
C)  Manually, Scheduled, Disabled 
D)  Manually, Scheduled, Enabled 
A)  Manually, Scheduled, Automatic 
B)  Manually, Automatic, Disabled 
C)  Manually, Scheduled, Disabled 
D)  Manually, Scheduled, Enabled

Question 9

Which process is available on any management product and on products that require direct GUI access, such as SmartEvent and provides GUI client communications, database manipulation, policy compilation and Management HA synchronization?

Accepted Answer

A)  cpwd 
B)  fwd 
C)  cpd 
D)  fwm 
A)  cpwd 
B)  fwd 
C)  cpd 
D)  fwm

Question 10

Connections to the Check Point R80 Web API use what protocol?

Accepted Answer

A)  HTTPS 
B)  RPC 
C)  VPN 
D)  SIC 
A)  HTTPS 
B)  RPC 
C)  VPN 
D)  SIC

Question 11

What is the default size of NAT table fwx_alloc?

Accepted Answer

A)  20000 
B)  35000 
C)  25000 
D)  10000 
A)  20000 
B)  35000 
C)  25000 
D)  10000

Question 12

VPN Link Selection will perform the following when the primary VPN link goes down?

Accepted Answer

A)  The Firewall will drop the packets. 
B)  The Firewall can update the Link Selection entries to start using a different link for the same tunnel. 
C)  The Firewall will send out the packet on all interfaces. 
D)  The Firewall will inform the client that the tunnel is down. 
A)  The Firewall will drop the packets. 
B)  The Firewall can update the Link Selection entries to start using a different link for the same tunnel. 
C)  The Firewall will send out the packet on all interfaces. 
D)  The Firewall will inform the client that the tunnel is down.

Question 13

You want to gather and analyze threats to your mobile device. It has to be a lightweight app. Which application would you use?

Accepted Answer

A)  SmartEvent Client Info 
B)  SecuRemote 
C)  Check Point Protect 
D)  Check Point Capsule Cloud 
A)  SmartEvent Client Info 
B)  SecuRemote 
C)  Check Point Protect 
D)  Check Point Capsule Cloud

Question 14

The "fw monitor" tool can be best used to troubleshoot _______________.

Accepted Answer

A)  Logging issues 
B)  FWD issues 
C)  Network traffic issues 
D)  Authentication issues 
A)  Logging issues 
B)  FWD issues 
C)  Network traffic issues 
D)  Authentication issues

Question 15

On R80.10 the IPS Blade is managed by:

Accepted Answer

A)  Threat Protection policy 
B)  Anti-Bot Blade 
C)  Threat Prevention policy 
D)  Layers on Firewall policy 
A)  Threat Protection policy 
B)  Anti-Bot Blade 
C)  Threat Prevention policy 
D)  Layers on Firewall policy

Question 16

What is the Implicit Clean-up Rule?

Accepted Answer

A)  A setting is defined in the Global Properties for all policies. 
B)  A setting that is configured per Policy Layer. 
C)  Another name for the Clean-up Rule. 
D)  Automatically created when the Clean-up Rule is defined. 
A)  A setting is defined in the Global Properties for all policies. 
B)  A setting that is configured per Policy Layer. 
C)  Another name for the Clean-up Rule. 
D)  Automatically created when the Clean-up Rule is defined.

Question 17

What is the mechanism behind Threat Extraction?

Accepted Answer

A)  This a new mechanism which extracts malicious files from a document to use it as a counter-attack against its sender. 
B)  This is a new mechanism which is able to collect malicious files out of any kind of file types to destroy it prior to sending it to the intended recipient. 
C)  This is a new mechanism to identify the IP address of the sender of malicious codes and put it into the SAM database (Suspicious Activity Monitoring). 
D)  Any active contents of a document, such as JavaScripts, macros and links will be removed from the document and forwarded to the intended recipient, which makes this solution very fast. 
A)  This a new mechanism which extracts malicious files from a document to use it as a counter-attack against its sender. 
B)  This is a new mechanism which is able to collect malicious files out of any kind of file types to destroy it prior to sending it to the intended recipient. 
C)  This is a new mechanism to identify the IP address of the sender of malicious codes and put it into the SAM database (Suspicious Activity Monitoring). 
D)  Any active contents of a document, such as JavaScripts, macros and links will be removed from the document and forwarded to the intended recipient, which makes this solution very fast.

Question 18

Which of the following is NOT a type of Check Point API available in R80.10?

Accepted Answer

A)  Identity Awareness Web Services 
B)  OPSEC SDK 
C)  Mobile Access 
D)  Management 
A)  Identity Awareness Web Services 
B)  OPSEC SDK 
C)  Mobile Access 
D)  Management

Question 19

SandBlast appliances can be deployed in the following modes:

Accepted Answer

A)  using a SPAN port to receive a copy of the traffic only 
B)  detect only 
C)  inline/prevent or detect 
D)  as a Mail Transfer Agent and as part of the traffic flow only 
A)  using a SPAN port to receive a copy of the traffic only 
B)  detect only 
C)  inline/prevent or detect 
D)  as a Mail Transfer Agent and as part of the traffic flow only

Question 20

Which is NOT an example of a Check Point API?

Accepted Answer

A)  Gateway API 
B)  Management API 
C)  OPSEC SDK 
D)  Threat Prevention API 
A)  Gateway API 
B)  Management API 
C)  OPSEC SDK 
D)  Threat Prevention API

What is mandatory for ClusterXL to work properly?

Which features are only supported with R80.10 Gateways but not R77.x?

Installations and upgrades with CPUSE require that the CPUSE agent is up-to-date. Usually the latest build is downloaded automatically. How can you verify the CPUSE agent build?

Which statement is true regarding redundancy?

What feature allows Remote-access VPN users to access resources across a site-to-site VPN tunnel?

When gathering information about a gateway using CPINFO, what information is included or excluded when using the "-x" parameter?

What is the best sync method in the ClusterXL deployment?

What are the available options for downloading Check Point hotfixes in Gaia WebUI (CPUSE)?

Which process is available on any management product and on products that require direct GUI access, such as SmartEvent and provides GUI client communications, database manipulation, policy compilation and Management HA synchronization?

Connections to the Check Point R80 Web API use what protocol?

What is the default size of NAT table fwx_alloc?

VPN Link Selection will perform the following when the primary VPN link goes down?

You want to gather and analyze threats to your mobile device. It has to be a lightweight app. Which application would you use?

The "fw monitor" tool can be best used to troubleshoot _______________.

On R80.10 the IPS Blade is managed by:

What is the Implicit Clean-up Rule?

What is the mechanism behind Threat Extraction?

Which of the following is NOT a type of Check Point API available in R80.10?

SandBlast appliances can be deployed in the following modes:

Which is NOT an example of a Check Point API?

Check Point Certified Security Principles Associate (CCSPA)

Check Point Certified Security Administrator (CCSA R80)

Filters

Exam 3: Check Point Certified Security Expert - R80

What is mandatory for ClusterXL to work properly?

Which features are only supported with R80.10 Gateways but not R77.x?

Installations and upgrades with CPUSE require that the CPUSE agent is up-to-date. Usually the latest build is downloaded automatically. How can you verify the CPUSE agent build?

Which statement is true regarding redundancy?

What feature allows Remote-access VPN users to access resources across a site-to-site VPN tunnel?

When gathering information about a gateway using CPINFO, what information is included or excluded when using the "-x" parameter?

What is the best sync method in the ClusterXL deployment?

What are the available options for downloading Check Point hotfixes in Gaia WebUI (CPUSE)?

Which process is available on any management product and on products that require direct GUI access, such as SmartEvent and provides GUI client communications, database manipulation, policy compilation and Management HA synchronization?

Connections to the Check Point R80 Web API use what protocol?

What is the default size of NAT table fwx_alloc?

VPN Link Selection will perform the following when the primary VPN link goes down?

You want to gather and analyze threats to your mobile device. It has to be a lightweight app. Which application would you use?

The "fw monitor" tool can be best used to troubleshoot _______________.

On R80.10 the IPS Blade is managed by:

What is the Implicit Clean-up Rule?

What is the mechanism behind Threat Extraction?

Which of the following is NOT a type of Check Point API available in R80.10?

SandBlast appliances can be deployed in the following modes:

Which is NOT an example of a Check Point API?

Check Point Certified Security Principles Associate (CCSPA)

Check Point Certified Security Administrator (CCSA R80)

Filters