Question 1

What is the most ideal Synchronization Status for Security Management Server High Availability deployment?

Accepted Answer

A)  Lagging 
B)  Synchronized 
C)  Never been synchronized 
D)  Collision 
A)  Lagging 
B)  Synchronized 
C)  Never been synchronized 
D)  Collision

Question 2

Using Threat Emulation technologies, what is the best way to block .exe and .bat file types?

Accepted Answer

A)  enable DLP and select.exe and .bat file type 
B)  enable .exe & .bat protection in IPS Policy 
C)  create FW rule for particular protocol 
D)  tecli advanced attributes set prohibited_file_types exe.bat 
A)  enable DLP and select.exe and .bat file type 
B)  enable .exe & .bat protection in IPS Policy 
C)  create FW rule for particular protocol 
D)  tecli advanced attributes set prohibited_file_types exe.bat

Question 3

After verifying that API Server is not running, how can you start the API Server?

Accepted Answer

A)  Run command "set api start" in CLISH mode 
B)  Run command "mgmt_cli set api start" in Expert mode 
C)  Run command "mgmt api start" in any mode 
D)  Run command "api start" in any mode 
A)  Run command "set api start" in CLISH mode 
B)  Run command "mgmt_cli set api start" in Expert mode 
C)  Run command "mgmt api start" in any mode 
D)  Run command "api start" in any mode

Question 4

There are 4 ways to use the Management API for creating host object with R80 Management API. Which one is NOT correct?

Accepted Answer

A)  Using Web Services 
B)  Using cpconfig 
C)  Using CLISH 
D)  Using SmartConsole GUI console 
A)  Using Web Services 
B)  Using cpconfig 
C)  Using CLISH 
D)  Using SmartConsole GUI console

Question 5

In the Check Point Firewall Kernel Module, each Kernel is associated with a key, which specifies the type of traffic applicable to the chain module. For Wire Mode configuration, chain modules marked with __________________ will not apply.

Accepted Answer

A)  ffff 
B)  1 
C)  2 
D)  3 
A)  ffff 
B)  1 
C)  2 
D)  3

Question 6

When doing a Stand-Alone Installation, you would install the Security Management Server with which other Check Point architecture component?

Accepted Answer

A)  None, Security Management Server would be installed by itself. 
B)  SmartConsole 
C)  SecureClient 
D)  Security Gateway 
E)  SmartEvent 
A)  None, Security Management Server would be installed by itself. 
B)  SmartConsole 
C)  SecureClient 
D)  Security Gateway 
E)  SmartEvent

Question 7

Which web services protocol is used to communicate to the Check Point R80 Identity Awareness Web API?

Accepted Answer

A)  SOAP 
B)  REST 
C)  XLANG 
D)  XML-RPC 
A)  SOAP 
B)  REST 
C)  XLANG 
D)  XML-RPC

Question 8

The Event List within the Event tab contains:

Accepted Answer

A)  a list of options available for running a query. 
B)  the top events, destinations, sources, and users of the query results, either as a chart or in a tallied list. 
C)  events generated by a query. 
D)  the details of a selected event. 
A)  a list of options available for running a query. 
B)  the top events, destinations, sources, and users of the query results, either as a chart or in a tallied list. 
C)  events generated by a query. 
D)  the details of a selected event.

Question 9

Fill in the blank: __________ information is included in "Full Log" tracking option, but is not included in "Log" tracking option?

Accepted Answer

A)  Destination port 
B)  Data type 
C)  File attributes 
D)  Application 
A)  Destination port 
B)  Data type 
C)  File attributes 
D)  Application

Question 10

According to out of the box SmartEvent policy, which blade will automatically be correlated into events?

Accepted Answer

A)  Firewall 
B)  VPN 
C)  IPS 
D)  HTTPS 
A)  Firewall 
B)  VPN 
C)  IPS 
D)  HTTPS

Question 11

The Correlation Unit performs all but the following actions:

Accepted Answer

A)  Marks logs that individually are not events, but may be part of a larger pattern to be identified later. 
B)  Generates an event based on the Event policy. 
C)  Assigns a severity level to the event. 
D)  Takes a new log entry that is part of a group of items that together make up an event, and adds it to an ongoing event. 
A)  Marks logs that individually are not events, but may be part of a larger pattern to be identified later. 
B)  Generates an event based on the Event policy. 
C)  Assigns a severity level to the event. 
D)  Takes a new log entry that is part of a group of items that together make up an event, and adds it to an ongoing event.

Question 12

What is the recommended number of physical network interfaces in a Mobile Access cluster deployment?

Accepted Answer

A)  4 Interfaces - an interface leading to the organization, a second interface leading to the internet, a third interface for synchronization, a fourth interface leading to the Security Management Server. 
B)  3 Interfaces - an interface leading to the organization, a second interface leading to the Internet, a third interface for synchronization. 
C)  1 Interface - an interface leading to the organization and the Internet, and configure for synchronization. 
D)  2 Interfaces - a data interface leading to the organization and the Internet, a second interface for synchronization. 
A)  4 Interfaces - an interface leading to the organization, a second interface leading to the internet, a third interface for synchronization, a fourth interface leading to the Security Management Server. 
B)  3 Interfaces - an interface leading to the organization, a second interface leading to the Internet, a third interface for synchronization. 
C)  1 Interface - an interface leading to the organization and the Internet, and configure for synchronization. 
D)  2 Interfaces - a data interface leading to the organization and the Internet, a second interface for synchronization.

Question 13

What are the main stages of a policy installations?

Accepted Answer

A)  Verification & Compilation, Transfer and Commit 
B)  Verification & Compilation, Transfer and Installation 
C)  Verification, Commit, Installation 
D)  Verification, Compilation & Transfer, Installation 
A)  Verification & Compilation, Transfer and Commit 
B)  Verification & Compilation, Transfer and Installation 
C)  Verification, Commit, Installation 
D)  Verification, Compilation & Transfer, Installation

Question 14

From SecureXL perspective, what are the three paths of traffic flow:

Accepted Answer

A)  Initial Path; Medium Path; Accelerated Path 
B)  Layer Path; Blade Path; Rule Path 
C)  Firewall Path; Accept Path; Drop Path 
D)  Firewall Path; Accelerated Path; Medium Path 
A)  Initial Path; Medium Path; Accelerated Path 
B)  Layer Path; Blade Path; Rule Path 
C)  Firewall Path; Accept Path; Drop Path 
D)  Firewall Path; Accelerated Path; Medium Path

Question 15

What kind of information would you expect to see using the "sim affinity -l" command?

Accepted Answer

A)  The VMACs used in a Security Gateway cluster 
B)  The involved firewall kernel modules in inbound and outbound packet chain 
C)  Overview over SecureXL templated connections 
D)  Affinity Distribution 
A)  The VMACs used in a Security Gateway cluster 
B)  The involved firewall kernel modules in inbound and outbound packet chain 
C)  Overview over SecureXL templated connections 
D)  Affinity Distribution

Question 16

You work as a security administrator for a large company. CSO of your company has attended a security conference where he has learnt how hackers constantly modify their strategies and techniques to evade detection and reach corporate resources. He wants to make sure that his company has the tight protections in place. Check Point has been selected for the security vendor. Which Check Point product protects BEST against malware and zero-day attacks while ensuring quick delivery of safe content to your users?

Accepted Answer

A)  IPS AND Application Control 
B)  IPS, anti-virus and anti-bot 
C)  IPS, anti-virus and e-mail security 
D)  SandBlast 
A)  IPS AND Application Control 
B)  IPS, anti-virus and anti-bot 
C)  IPS, anti-virus and e-mail security 
D)  SandBlast

Question 17

GAIA greatly increases operational efficiency by offering an advanced and intuitive software update agent, commonly referred to as the:

Accepted Answer

A)  Check Point Update Service Engine 
B)  Check Point Software Update Agent 
C)  Check Point Remote Installation Daemon (CPRI
D)  
D)  Check Point Software Update Daemon 
A)  Check Point Update Service Engine 
B)  Check Point Software Update Agent 
C)  Check Point Remote Installation Daemon (CPRI
D)  
D)  Check Point Software Update Daemon

Question 18

Which is NOT an example of a Check Point API?

Accepted Answer

A)  Gateway API 
B)  Management API 
C)  OPSC SDK 
D)  Threat Prevention API 
A)  Gateway API 
B)  Management API 
C)  OPSC SDK 
D)  Threat Prevention API

Question 19

Which command shows detailed information about VPN tunnels?

Accepted Answer

A)  cat $FWDIR/conf/vpn.conf 
B)  vpn tu tlist 
C)  vpn tu 
D)  cpview 
A)  cat $FWDIR/conf/vpn.conf 
B)  vpn tu tlist 
C)  vpn tu 
D)  cpview

Question 20

What API command below creates a new host with the name "New Host" and IP address of "192.168.0.10"?

Accepted Answer

A)  new host name "New Host" ip-address "192.168.0.10" 
B)  set host name "New Host" ip-address "192.168.0.10" 
C)  create host name "New Host" ip-address "192.168.0.10" 
D)  add host name "New Host" ip-address "192.168.0.10" 
A)  new host name "New Host" ip-address "192.168.0.10" 
B)  set host name "New Host" ip-address "192.168.0.10" 
C)  create host name "New Host" ip-address "192.168.0.10" 
D)  add host name "New Host" ip-address "192.168.0.10"

What is the most ideal Synchronization Status for Security Management Server High Availability deployment?

Using Threat Emulation technologies, what is the best way to block .exe and .bat file types?

After verifying that API Server is not running, how can you start the API Server?

There are 4 ways to use the Management API for creating host object with R80 Management API. Which one is NOT correct?

In the Check Point Firewall Kernel Module, each Kernel is associated with a key, which specifies the type of traffic applicable to the chain module. For Wire Mode configuration, chain modules marked with __________________ will not apply.

When doing a Stand-Alone Installation, you would install the Security Management Server with which other Check Point architecture component?

Which web services protocol is used to communicate to the Check Point R80 Identity Awareness Web API?

The Event List within the Event tab contains:

Fill in the blank: __________ information is included in "Full Log" tracking option, but is not included in "Log" tracking option?

According to out of the box SmartEvent policy, which blade will automatically be correlated into events?

The Correlation Unit performs all but the following actions:

What is the recommended number of physical network interfaces in a Mobile Access cluster deployment?

What are the main stages of a policy installations?

From SecureXL perspective, what are the three paths of traffic flow:

What kind of information would you expect to see using the "sim affinity -l" command?

GAIA greatly increases operational efficiency by offering an advanced and intuitive software update agent, commonly referred to as the:

Which is NOT an example of a Check Point API?

Which command shows detailed information about VPN tunnels?

What API command below creates a new host with the name "New Host" and IP address of "192.168.0.10"?

Check Point Certified Security Principles Associate (CCSPA)

Check Point Certified Security Administrator (CCSA R80)

Filters

Exam 3: Check Point Certified Security Expert - R80

What is the most ideal Synchronization Status for Security Management Server High Availability deployment?

Using Threat Emulation technologies, what is the best way to block .exe and .bat file types?

After verifying that API Server is not running, how can you start the API Server?

There are 4 ways to use the Management API for creating host object with R80 Management API. Which one is NOT correct?

In the Check Point Firewall Kernel Module, each Kernel is associated with a key, which specifies the type of traffic applicable to the chain module. For Wire Mode configuration, chain modules marked with __________________ will not apply.

When doing a Stand-Alone Installation, you would install the Security Management Server with which other Check Point architecture component?

Which web services protocol is used to communicate to the Check Point R80 Identity Awareness Web API?

The Event List within the Event tab contains:

Fill in the blank: __________ information is included in "Full Log" tracking option, but is not included in "Log" tracking option?

According to out of the box SmartEvent policy, which blade will automatically be correlated into events?

The Correlation Unit performs all but the following actions:

What is the recommended number of physical network interfaces in a Mobile Access cluster deployment?

What are the main stages of a policy installations?

From SecureXL perspective, what are the three paths of traffic flow:

What kind of information would you expect to see using the "sim affinity -l" command?

GAIA greatly increases operational efficiency by offering an advanced and intuitive software update agent, commonly referred to as the:

Which is NOT an example of a Check Point API?

Which command shows detailed information about VPN tunnels?

What API command below creates a new host with the name "New Host" and IP address of "192.168.0.10"?

Check Point Certified Security Principles Associate (CCSPA)

Check Point Certified Security Administrator (CCSA R80)

Filters