Question 1

What is required for a certificate-based VPN tunnel between two gateways with separate management systems?

Accepted Answer

A)  Mutually Trusted Certificate Authorities 
B)  Shared User Certificates 
C)  Shared Secret Passwords 
D)  Unique Passwords 
A)  Mutually Trusted Certificate Authorities 
B)  Shared User Certificates 
C)  Shared Secret Passwords 
D)  Unique Passwords

Question 2

When Dynamic Dispatcher is enabled, connections are assigned dynamically with the exception of:

Accepted Answer

A)  Threat Emulation 
B)  HTTPS 
C)  QOS 
D)  VoIP 
A)  Threat Emulation 
B)  HTTPS 
C)  QOS 
D)  VoIP

Question 3

Check Point Support in many cases asks you for a configuration summary of your Check Point system. This is also called:

Accepted Answer

A)  cpexport 
B)  sysinfo 
C)  cpsizeme 
D)  cpinfo 
A)  cpexport 
B)  sysinfo 
C)  cpsizeme 
D)  cpinfo

Question 4

Check Point APIs allow system engineers and developers to make changes to their organization's security policy with CLI tools and Web Services for all the following except:

Accepted Answer

A)  Create new dashboards to manage 3 rd party task Create new dashboards to manage 3 rd party task 
B)  Create products that use and enhance 3 rd party solutions Create products that use and enhance 3 party solutions 
C)  Execute automated scripts to perform common tasks 
D)  Create products that use and enhance the Check Point Solution 
A)  Create new dashboards to manage 3 rd party task Create new dashboards to manage 3 rd party task 
B)  Create products that use and enhance 3 rd party solutions Create products that use and enhance 3 party solutions 
C)  Execute automated scripts to perform common tasks 
D)  Create products that use and enhance the Check Point Solution

Question 5

In R80, where do you manage your Mobile Access Policy?

Accepted Answer

A)  Access Control Policy 
B)  Through the Mobile Console 
C)  Shared Gateways Policy 
D)  From the Dedicated Mobility Tab 
A)  Access Control Policy 
B)  Through the Mobile Console 
C)  Shared Gateways Policy 
D)  From the Dedicated Mobility Tab

Question 6

Which Check Point daemon monitors the other daemons?

Accepted Answer

A)  fwm 
B)  cpd 
C)  cpwd 
D)  fwssd 
A)  fwm 
B)  cpd 
C)  cpwd 
D)  fwssd

Question 7

To help SmartEvent determine whether events originated internally or externally you must define using the Initial Settings under General Settings in the Policy Tab. How many options are available to calculate the traffic direction?

Accepted Answer

A)  5 Network; Host; Objects; Services; API 
B)  3 Incoming; Outgoing; Network 
C)  2 Internal; External 
D)  4 Incoming; Outgoing; Internal; Other 
A)  5 Network; Host; Objects; Services; API 
B)  3 Incoming; Outgoing; Network 
C)  2 Internal; External 
D)  4 Incoming; Outgoing; Internal; Other

Question 8

What makes Anti-Bot unique compared to other Threat Prevention mechanisms, such as URL Filtering, Anti-Virus, IPS, and Threat Emulation?

Accepted Answer

A)  Anti-Bot is the only countermeasure against unknown malware 
B)  Anti-Bot is the only protection mechanism which starts a counter-attack against known Command & Control Centers 
C)  Anti-Bot is the only signature-based method of malware protection. 
D)  Anti-Bot is a post-infection malware protection to prevent a host from establishing a connection to a Command & Control Center. 
A)  Anti-Bot is the only countermeasure against unknown malware 
B)  Anti-Bot is the only protection mechanism which starts a counter-attack against known Command & Control Centers 
C)  Anti-Bot is the only signature-based method of malware protection. 
D)  Anti-Bot is a post-infection malware protection to prevent a host from establishing a connection to a Command & Control Center.

Question 9

In the R80 SmartConsole, on which tab are Permissions and Administrators defined?

Accepted Answer

A)  Security Policies 
B)  Logs and Monitor 
C)  Manage and Settings 
D)  Gateways and Servers 
A)  Security Policies 
B)  Logs and Monitor 
C)  Manage and Settings 
D)  Gateways and Servers

Question 10

In ClusterXL Load Sharing Multicast Mode:

Accepted Answer

A)  only the primary member received packets sent to the cluster IP address 
B)  only the secondary member receives packets sent to the cluster IP address 
C)  packets sent to the cluster IP address are distributed equally between all members of the cluster 
D)  every member of the cluster received all of the packets sent to the cluster IP address 
A)  only the primary member received packets sent to the cluster IP address 
B)  only the secondary member receives packets sent to the cluster IP address 
C)  packets sent to the cluster IP address are distributed equally between all members of the cluster 
D)  every member of the cluster received all of the packets sent to the cluster IP address

Question 11

Which of the following is NOT a type of Check Point API available in R80.x?

Accepted Answer

A)  Identity Awareness Web Services 
B)  OPSEC SDK 
C)  Mobile Access 
D)  Management 
A)  Identity Awareness Web Services 
B)  OPSEC SDK 
C)  Mobile Access 
D)  Management

Question 12

Which GUI client is supported in R80?

Accepted Answer

A)  SmartProvisioning 
B)  SmartView Tracker 
C)  SmartView Monitor 
D)  SmartLog 
A)  SmartProvisioning 
B)  SmartView Tracker 
C)  SmartView Monitor 
D)  SmartLog

Question 13

How many images are included with Check Point TE appliance in Recommended Mode?

Accepted Answer

A)  2(OS) images 
B)  images are chosen by administrator during installation 
C)  as many as licensed for 
D)  the most new image 
A)  2(OS) images 
B)  images are chosen by administrator during installation 
C)  as many as licensed for 
D)  the most new image

Question 14

Which statement is true regarding redundancy?

Accepted Answer

A)  System Administrators know when their cluster has failed over and can also see why it failed over by using the cphaprob -f if command. 
B)  ClusterXL offers three different Load Sharing solutions: Unicast, Broadcast, and Multicast. 
C)  Machines in a ClusterXL High Availability configuration must be synchronized. 
D)  Both ClusterXL and VRRP are fully supported by Gaia and available to all Check Point appliances, open servers, and virtualized environments. 
A)  System Administrators know when their cluster has failed over and can also see why it failed over by using the cphaprob -f if command. 
B)  ClusterXL offers three different Load Sharing solutions: Unicast, Broadcast, and Multicast. 
C)  Machines in a ClusterXL High Availability configuration must be synchronized. 
D)  Both ClusterXL and VRRP are fully supported by Gaia and available to all Check Point appliances, open servers, and virtualized environments.

Question 15

You need to change the number of firewall Instances used by CoreXL. How can you achieve this goal?

Accepted Answer

A)  edit fwaffinity.conf; reboot required 
B)  cpconfig; reboot required 
C)  edit fwaffinity.conf; reboot not required 
D)  cpconfig; reboot not required 
A)  edit fwaffinity.conf; reboot required 
B)  cpconfig; reboot required 
C)  edit fwaffinity.conf; reboot not required 
D)  cpconfig; reboot not required

Question 16

Which packet info is ignored with Session Rate Acceleration?

Accepted Answer

A)  source port ranges 
B)  source ip 
C)  source port 
D)  same info from Packet Acceleration is used 
A)  source port ranges 
B)  source ip 
C)  source port 
D)  same info from Packet Acceleration is used

Question 17

The system administrator of a company is trying to find out why acceleration is not working for the traffic. The traffic is allowed according to the rule based and checked for viruses. But it is not accelerated. What is the most likely reason that the traffic is not accelerated?

Accepted Answer

A)  The connection is destined for a server within the network 
B)  The connection required a Security server 
C)  The packet is the second in an established TCP connection 
D)  The packets are not multicast 
A)  The connection is destined for a server within the network 
B)  The connection required a Security server 
C)  The packet is the second in an established TCP connection 
D)  The packets are not multicast

Question 18

By default how often updates are checked when the CPUSE Software Updates Policy is set to Automatic?

Accepted Answer

A)  Six times per day 
B)  Seven times per day 
C)  Every two hours 
D)  Every three hours 
A)  Six times per day 
B)  Seven times per day 
C)  Every two hours 
D)  Every three hours

Question 19

Customer's R80 management server needs to be upgraded to R80.10. What is the best upgrade method when the management server is not connected to the Internet?

Accepted Answer

A)  Export R80 configuration, clean install R80.10 and import the configuration 
B)  CPUSE offline upgrade 
C)  CPUSE online upgrade 
D)  SmartUpdate upgrade 
A)  Export R80 configuration, clean install R80.10 and import the configuration 
B)  CPUSE offline upgrade 
C)  CPUSE online upgrade 
D)  SmartUpdate upgrade

Question 20

What are the main stages of a policy installation?

Accepted Answer

A)  Verification Compilation, Transfer and Commit 
B)  Initiation, Conversion and FWD REXEC 
C)  Verification, Commit, Installation 
D)  Initiation, Conversion and Save 
A)  Verification Compilation, Transfer and Commit 
B)  Initiation, Conversion and FWD REXEC 
C)  Verification, Commit, Installation 
D)  Initiation, Conversion and Save

What is required for a certificate-based VPN tunnel between two gateways with separate management systems?

When Dynamic Dispatcher is enabled, connections are assigned dynamically with the exception of:

Check Point Support in many cases asks you for a configuration summary of your Check Point system. This is also called:

Check Point APIs allow system engineers and developers to make changes to their organization's security policy with CLI tools and Web Services for all the following except:

In R80, where do you manage your Mobile Access Policy?

Which Check Point daemon monitors the other daemons?

To help SmartEvent determine whether events originated internally or externally you must define using the Initial Settings under General Settings in the Policy Tab. How many options are available to calculate the traffic direction?

What makes Anti-Bot unique compared to other Threat Prevention mechanisms, such as URL Filtering, Anti-Virus, IPS, and Threat Emulation?

In the R80 SmartConsole, on which tab are Permissions and Administrators defined?

In ClusterXL Load Sharing Multicast Mode:

Which of the following is NOT a type of Check Point API available in R80.x?

Which GUI client is supported in R80?

How many images are included with Check Point TE appliance in Recommended Mode?

Which statement is true regarding redundancy?

You need to change the number of firewall Instances used by CoreXL. How can you achieve this goal?

Which packet info is ignored with Session Rate Acceleration?

The system administrator of a company is trying to find out why acceleration is not working for the traffic. The traffic is allowed according to the rule based and checked for viruses. But it is not accelerated. What is the most likely reason that the traffic is not accelerated?

By default how often updates are checked when the CPUSE Software Updates Policy is set to Automatic?

Customer's R80 management server needs to be upgraded to R80.10. What is the best upgrade method when the management server is not connected to the Internet?

What are the main stages of a policy installation?

Check Point Certified Security Principles Associate (CCSPA)

Check Point Certified Security Administrator (CCSA R80)

Filters

Exam 3: Check Point Certified Security Expert - R80

What is required for a certificate-based VPN tunnel between two gateways with separate management systems?

When Dynamic Dispatcher is enabled, connections are assigned dynamically with the exception of:

Check Point Support in many cases asks you for a configuration summary of your Check Point system. This is also called:

Check Point APIs allow system engineers and developers to make changes to their organization's security policy with CLI tools and Web Services for all the following except:

In R80, where do you manage your Mobile Access Policy?

Which Check Point daemon monitors the other daemons?

To help SmartEvent determine whether events originated internally or externally you must define using the Initial Settings under General Settings in the Policy Tab. How many options are available to calculate the traffic direction?

What makes Anti-Bot unique compared to other Threat Prevention mechanisms, such as URL Filtering, Anti-Virus, IPS, and Threat Emulation?

In the R80 SmartConsole, on which tab are Permissions and Administrators defined?

In ClusterXL Load Sharing Multicast Mode:

Which of the following is NOT a type of Check Point API available in R80.x?

Which GUI client is supported in R80?

How many images are included with Check Point TE appliance in Recommended Mode?

Which statement is true regarding redundancy?

You need to change the number of firewall Instances used by CoreXL. How can you achieve this goal?

Which packet info is ignored with Session Rate Acceleration?

The system administrator of a company is trying to find out why acceleration is not working for the traffic. The traffic is allowed according to the rule based and checked for viruses. But it is not accelerated. What is the most likely reason that the traffic is not accelerated?

By default how often updates are checked when the CPUSE Software Updates Policy is set to Automatic?

Customer's R80 management server needs to be upgraded to R80.10. What is the best upgrade method when the management server is not connected to the Internet?

What are the main stages of a policy installation?

Check Point Certified Security Principles Associate (CCSPA)

Check Point Certified Security Administrator (CCSA R80)

Filters