Exam 3: Check Point Certified Security Expert - R80

The "Hit count" feature allows tracking the number of connections that each rule matches. Will the Hit count feature work independently from logging and Track the hits if the Track option is set to "None"?

What will SmartEvent automatically define as events?

You are investigating issues with to gateway cluster members are not able to establish the first initial cluster synchronization. What service is used by the FWD daemon to do a Full Synchronization?

In SmartEvent, which of the following is NOT an option to calculate the traffic direction?

What is a feature that enables VPN connections to successfully maintain a private and secure VPN session without employing Stateful Inspection?

Which file contains the host address to be published, the MAC address that needs to be associated with the IP Address, and the unique IP of the interface that responds to ARP request?

Which configuration file contains the structure of the Security Server showing the port numbers, corresponding protocol name, and status?

Check Pont Central Deployment Tool (CDT) communicates with the Security Gateway / Cluster Members over Check Point SIC _____________ .

Tom has connected to the R80 Management Server remotely using SmartConsole and is in the process of making some Rule Base changes, when he suddenly loses connectivity. Connectivity is restored shortly afterward. What will happen to the changes already made?

With MTA (Mail Transfer Agent) enabled the gateways manages SMTP traffic and holds external email with potentially malicious attachments. What is required in order to enable MTA (Mail Transfer Agent) functionality in the Security Gateway?

When using the Mail Transfer Agent, where are the debug logs stored?

What cloud-based SandBlast Mobile application is used to register new devices and users?

Where you can see and search records of action done by R80 SmartConsole administrators?

fwssd is a child process of which of the following Check Point daemons?

CoreXL is NOT supported when one of the following features is enabled: (Choose three)

The Log server sends what to the Correlation Unit?

Fill in the blank: Identity Awareness AD-Query is using the Microsoft _______________ API to learn users from AD.

Which one of the following is true about Threat Emulation?

In Advanced Permanent Tunnel Configuration, to set the amount of time the tunnel test runs without a response before the peer host is declared 'down', you would set the_________?

When configuring SmartEvent Initial settings, you must specify a basic topology to SmartEvent to help it calculate traffic direction for events. What is this setting called, and what are you defining?