Question 1

Which of the following links will take you to the SmartView web application?

Accepted Answer

A) https:///smartviewweb/ B) https:///smartview/ C) https://smartviewweb D) https:///smartviewapp A) https:///smartviewweb/ B) https:///smartview/ C) https://smartviewweb D) https:///smartviewapp

Question 2

What is the valid range for VRID value in VRRP configuration?

Accepted Answer

A)  1 - 254 
B)  1 - 255 
C)  0 - 254 
D)  0 - 255 
A)  1 - 254 
B)  1 - 255 
C)  0 - 254 
D)  0 - 255

Question 3

Which of the following authentication methods ARE NOT used for Mobile Access?

Accepted Answer

A)  RADIUS server 
B)  Username and password (internal, LDAP) 
C)  SecurID 
D)  TACACS+ 
A)  RADIUS server 
B)  Username and password (internal, LDAP) 
C)  SecurID 
D)  TACACS+

Question 4

Which process handles connection from SmartConsole R80?

Accepted Answer

A)  fwm 
B)  cpmd 
C)  cpm 
D)  cpd 
A)  fwm 
B)  cpmd 
C)  cpm 
D)  cpd

Question 5

When users connect to the Mobile Access portal they are unable to open File Shares. Which log file would you want to examine?

Accepted Answer

A)  cvpnd.elg 
B)  httpd.elg 
C)  vpnd.elg 
D)  fw.elg 
A)  cvpnd.elg 
B)  httpd.elg 
C)  vpnd.elg 
D)  fw.elg

Question 6

You have pushed policy to GW-3 and now cannot pass traffic through the gateway. As a last resort, to restore traffic flow, what command would you run to remove the latest policy from GW-3?

Accepted Answer

A)  fw unloadlocal 
B)  fw unloadpolicy 
C)  fwm unload local 
D)  fwm unload policy 
A)  fw unloadlocal 
B)  fw unloadpolicy 
C)  fwm unload local 
D)  fwm unload policy

Question 7

Which Remote Access Client does not provide an Office-Mode Address?

Accepted Answer

A)  SecuRemote 
B)  Endpoint Security Suite 
C)  Endpoint Security VPN 
D)  Check Point Mobile 
A)  SecuRemote 
B)  Endpoint Security Suite 
C)  Endpoint Security VPN 
D)  Check Point Mobile

Question 8

What is the difference between SSL VPN and IPSec VPN?

Accepted Answer

A)  IPSec VPN does not require installation of a residient VPN client. 
B)  SSL VPN requires installation of a resident VPN client. 
C)  SSL VPN and IPSec VPN are the same. 
D)  IPSec VPN requires installation of a resident VPN client and SSL VPN requires only an installed Browser. 
A)  IPSec VPN does not require installation of a residient VPN client. 
B)  SSL VPN requires installation of a resident VPN client. 
C)  SSL VPN and IPSec VPN are the same. 
D)  IPSec VPN requires installation of a resident VPN client and SSL VPN requires only an installed Browser.

Question 9

What ports are used for SmartConsole to connect to the Security Management Server?

Accepted Answer

A)  CPMI (18190) 
B)  CPM (19009), CPMI (18190) & https (443) 
C)  CPM (19009), CPMI (18190) & CPD (18191) 
D)  ICA_Pull (18210), CPMI (18190) & https (443) 
A)  CPMI (18190) 
B)  CPM (19009), CPMI (18190) & https (443) 
C)  CPM (19009), CPMI (18190) & CPD (18191) 
D)  ICA_Pull (18210), CPMI (18190) & https (443)

Question 10

With Mobile Access enabled, administrators select the web-based and native applications that can be accessed by remote users and define the actions that users can perform the applications. Mobile Access encrypts all traffic using:

Accepted Answer

A)  HTTPS for web-based applications and 3DES or RC4 algorithm for native applications. For end users to access the native applications, they need to install the SSL. Network Extender. 
B)  HTTPS for web-based applications and AES or RSA algorithm for native applications. For end users to access the native application, they need to install the SSL. Network Extender. 
C)  HTTPS for web-based applications and 3DES or RC4 algorithm for native applications. For end users to access the native applications, no additional software is required. 
D)  HTTPS for web-based applications and AES or RSA algorithm for native applications. For end users to access the native application, no additional software is required. 
A)  HTTPS for web-based applications and 3DES or RC4 algorithm for native applications. For end users to access the native applications, they need to install the SSL. Network Extender. 
B)  HTTPS for web-based applications and AES or RSA algorithm for native applications. For end users to access the native application, they need to install the SSL. Network Extender. 
C)  HTTPS for web-based applications and 3DES or RC4 algorithm for native applications. For end users to access the native applications, no additional software is required. 
D)  HTTPS for web-based applications and AES or RSA algorithm for native applications. For end users to access the native application, no additional software is required.

Question 11

John detected high load on sync interface. Which is most recommended solution?

Accepted Answer

A)  For FTP connections - do not sync 
B)  Add a second interface to handle sync traffic 
C)  For short connections like http service - do not sync 
D)  For short connections like icmp service - delay sync for 2 seconds 
A)  For FTP connections - do not sync 
B)  Add a second interface to handle sync traffic 
C)  For short connections like http service - do not sync 
D)  For short connections like icmp service - delay sync for 2 seconds

Question 12

What is the most recommended way to install patches and hotfixes?

Accepted Answer

A)  CPUSE Check Point Update Service Engine 
B)  rpm -Uv 
C)  Software Update Service 
D)  UnixinstallScript 
A)  CPUSE Check Point Update Service Engine 
B)  rpm -Uv 
C)  Software Update Service 
D)  UnixinstallScript

Question 13

What is the command to check the status of Check Point processes?

Accepted Answer

A)  top 
B)  cptop 
C)  cphaprob list 
D)  cpwd_admin list 
A)  top 
B)  cptop 
C)  cphaprob list 
D)  cpwd_admin list

Question 14

Traffic from source 192.168.1.1 is going to www.google.com. The Application Control Blade on the gateway is inspecting the traffic. Assuming acceleration is enabled which path is handling the traffic?

Accepted Answer

A)  Slow Path 
B)  Medium Path 
C)  Fast Path 
D)  Accelerated Path 
A)  Slow Path 
B)  Medium Path 
C)  Fast Path 
D)  Accelerated Path

Question 15

What is the best method to upgrade a Security Management Server to R80.x when it is not connected to the Internet?

Accepted Answer

A)  CPUSE offline upgrade only 
B)  Advanced upgrade or CPUSE offline upgrade 
C)  Advanced Upgrade only 
D)  SmartUpdate offline upgrade 
A)  CPUSE offline upgrade only 
B)  Advanced upgrade or CPUSE offline upgrade 
C)  Advanced Upgrade only 
D)  SmartUpdate offline upgrade

Question 16

Which Check Point software blades could be enforced under Threat Prevention profile using Check Point R80.10 SmartConsole application?

Accepted Answer

A)  IPS, Anti-Bot, URL Filtering, Application Control, Threat Emulation. 
B)  Firewall, IPS, Threat Emulation, Application Control. 
C)  IPS, Anti-Bot, Anti-Virus, Threat Emulation, Threat Extraction. 
D)  Firewall, IPS, Anti-Bot, Anti-Virus, Threat Emulation. 
A)  IPS, Anti-Bot, URL Filtering, Application Control, Threat Emulation. 
B)  Firewall, IPS, Threat Emulation, Application Control. 
C)  IPS, Anti-Bot, Anti-Virus, Threat Emulation, Threat Extraction. 
D)  Firewall, IPS, Anti-Bot, Anti-Virus, Threat Emulation.

Question 17

What is a best practice before starting to troubleshoot using the "fw monitor" tool?

Accepted Answer

A)  Run the command: fw monitor debug on 
B)  Clear the connections table 
C)  Disable CoreXL 
D)  Disable SecureXL 
A)  Run the command: fw monitor debug on 
B)  Clear the connections table 
C)  Disable CoreXL 
D)  Disable SecureXL

Question 18

If SecureXL is disabled which path is used to process traffic?

Accepted Answer

A)  Passive path 
B)  Medium path 
C)  Firewall path 
D)  Accelerated path 
A)  Passive path 
B)  Medium path 
C)  Firewall path 
D)  Accelerated path

Question 19

In which formats can Threat Emulation forensics reports be viewed in?

Accepted Answer

A)  TXT, XML and CSV 
B)  PDF and TXT 
C)  PDF, HTML, and XML 
D)  PDF and HTML 
A)  TXT, XML and CSV 
B)  PDF and TXT 
C)  PDF, HTML, and XML 
D)  PDF and HTML

Question 20

What has to be taken into consideration when configuring Management HA?

Accepted Answer

A)  The Database revisions will not be synchronized between the management servers 
B)  SmartConsole must be closed prior to synchronized changes in the objects database 
C)  If you wanted to use Full Connectivity Upgrade, you must change the Implied Rules to allow FW1_cpredundant to pass before the Firewall Control Connections. 
D)  For Management Server synchronization, only External Virtual Switches are supported. So, if you wanted to employ Virtual Routers instead, you have to reconsider your design. 
A)  The Database revisions will not be synchronized between the management servers 
B)  SmartConsole must be closed prior to synchronized changes in the objects database 
C)  If you wanted to use Full Connectivity Upgrade, you must change the Implied Rules to allow FW1_cpredundant to pass before the Firewall Control Connections. 
D)  For Management Server synchronization, only External Virtual Switches are supported. So, if you wanted to employ Virtual Routers instead, you have to reconsider your design.

Which of the following links will take you to the SmartView web application?

What is the valid range for VRID value in VRRP configuration?

Which of the following authentication methods ARE NOT used for Mobile Access?

Which process handles connection from SmartConsole R80?

When users connect to the Mobile Access portal they are unable to open File Shares. Which log file would you want to examine?

You have pushed policy to GW-3 and now cannot pass traffic through the gateway. As a last resort, to restore traffic flow, what command would you run to remove the latest policy from GW-3?

Which Remote Access Client does not provide an Office-Mode Address?

What is the difference between SSL VPN and IPSec VPN?

What ports are used for SmartConsole to connect to the Security Management Server?

With Mobile Access enabled, administrators select the web-based and native applications that can be accessed by remote users and define the actions that users can perform the applications. Mobile Access encrypts all traffic using:

John detected high load on sync interface. Which is most recommended solution?

What is the most recommended way to install patches and hotfixes?

What is the command to check the status of Check Point processes?

Traffic from source 192.168.1.1 is going to www.google.com. The Application Control Blade on the gateway is inspecting the traffic. Assuming acceleration is enabled which path is handling the traffic?

What is the best method to upgrade a Security Management Server to R80.x when it is not connected to the Internet?

Which Check Point software blades could be enforced under Threat Prevention profile using Check Point R80.10 SmartConsole application?

What is a best practice before starting to troubleshoot using the "fw monitor" tool?

If SecureXL is disabled which path is used to process traffic?

In which formats can Threat Emulation forensics reports be viewed in?

What has to be taken into consideration when configuring Management HA?

Check Point Certified Security Principles Associate (CCSPA)

Check Point Certified Security Administrator (CCSA R80)

Filters

Exam 3: Check Point Certified Security Expert - R80

Which of the following links will take you to the SmartView web application?

What is the valid range for VRID value in VRRP configuration?

Which of the following authentication methods ARE NOT used for Mobile Access?

Which process handles connection from SmartConsole R80?

When users connect to the Mobile Access portal they are unable to open File Shares. Which log file would you want to examine?

You have pushed policy to GW-3 and now cannot pass traffic through the gateway. As a last resort, to restore traffic flow, what command would you run to remove the latest policy from GW-3?

Which Remote Access Client does not provide an Office-Mode Address?

What is the difference between SSL VPN and IPSec VPN?

What ports are used for SmartConsole to connect to the Security Management Server?

With Mobile Access enabled, administrators select the web-based and native applications that can be accessed by remote users and define the actions that users can perform the applications. Mobile Access encrypts all traffic using:

John detected high load on sync interface. Which is most recommended solution?

What is the most recommended way to install patches and hotfixes?

What is the command to check the status of Check Point processes?

Traffic from source 192.168.1.1 is going to www.google.com. The Application Control Blade on the gateway is inspecting the traffic. Assuming acceleration is enabled which path is handling the traffic?

What is the best method to upgrade a Security Management Server to R80.x when it is not connected to the Internet?

Which Check Point software blades could be enforced under Threat Prevention profile using Check Point R80.10 SmartConsole application?

What is a best practice before starting to troubleshoot using the "fw monitor" tool?

If SecureXL is disabled which path is used to process traffic?

In which formats can Threat Emulation forensics reports be viewed in?

What has to be taken into consideration when configuring Management HA?

Check Point Certified Security Principles Associate (CCSPA)

Check Point Certified Security Administrator (CCSA R80)

Filters