Exam 3: Check Point Certified Security Expert - R80

If an administrator wants to add manual NAT for addresses now owned by the Check Point firewall, what else is necessary to be completed for it to function properly?

Which command shows the current connections distributed by CoreXL FW instances?

Which one of the following is true about Capsule Connect?

The Firewall Administrator is required to create 100 new host objects with different IP addresses. What API command can he use in the script to achieve the requirement?

After verifying that API Server is not running, how can you start the API Server?

Pamela is Cyber Security Engineer working for Global Instance Firm with large scale deployment of Check Point Enterprise Appliances using GAiA/R80.10. Company's Developer Team is having random access issue to newly deployed Application Server in DMZ's Application Server Farm Tier and blames DMZ Security Gateway as root cause. The ticket has been created and issue is at Pamela's desk for an investigation. Pamela decides to use Check Point's Packet Analyzer Tool-fw monitor to iron out the issue during approved Maintenance window. What do you recommend as the best suggestion for Pamela to make sure she successfully captures entire traffic in context of Firewall and problematic traffic?

When simulating a problem on ClusterXL cluster with cphaprob -d STOP -s problem -t 0 register, to initiate a failover on an active cluster member, what command allows you remove the problematic state?

What traffic does the Anti-bot feature block?

What CLI command compiles and installs a Security Policy on the target's Security Gateways?

What are the attributes that SecureXL will check after the connection is allowed by Security Policy?

SmartEvent uses it's event policy to identity events. How can this be customized?

Which of these is an implicit MEP option?

You notice that your firewall is under a DDoS attack and would like to enable the Penalty Box feature, which command you use?

You need to change the MAC-address on eth2 interface of the gateway. What is the correct way to change MAC-address in Check Point Gaia?

NAT rules are prioritized in which order? 1. Automatic Static NAT 2. Automatic Hide NAT 3. Manual/Pre-Automatic NAT 4. Post-Automatic/Manual NAT rules

What is the correct command to observe the Sync traffic in a VRRP environment?

Which member of a high-availability cluster should be upgraded first in a Zero downtime upgrade?

Which statement is most correct regarding about "CoreXL Dynamic Dispatcher"?

Capsule Connect and Capsule Workspace both offer secured connection for remote users who are using their mobile devices. However, there are differences between the two. Which of the following statements correctly identify each product's capabilities?

You noticed that CPU cores on the Security Gateway are usually 100% utilized and many packets were dropped. You don't have a budget to perform a hardware upgrade at this time. To optimize drops you decide to use Priority Queues and fully enable Dynamic Dispatcher. How can you enable them?