Question 1

To fully enable Dynamic Dispatcher on a Security Gateway:

Accepted Answer

A)  run "fw ctl multik dynamic_dispatching on" and then Reboot. 
B)  Using cpconfig, update the Dynamic Dispatcher value to "full" under the CoreXL menu. 
C)  Edit/proc/interrupts to include multik set_mode 1 at the bottom of the file, save, and reboot. 
D)  run fw ctl multik set_mode 1 in Expert mode and then reboot. 
A)  run "fw ctl multik dynamic_dispatching on" and then Reboot. 
B)  Using cpconfig, update the Dynamic Dispatcher value to "full" under the CoreXL menu. 
C)  Edit/proc/interrupts to include multik set_mode 1 at the bottom of the file, save, and reboot. 
D)  run fw ctl multik set_mode 1 in Expert mode and then reboot.

Question 2

To enable Dynamic Dispatch on Security Gateway without the Firewall Priority Queues, run the following command in Expert mode and reboot:

Accepted Answer

A)  fw ctl Dyn_Dispatch on 
B)  fw ctl Dyn_Dispatch enable 
C)  fw ctl multik set_mode 4 
D)  fw ctl multik set_mode 1 
A)  fw ctl Dyn_Dispatch on 
B)  fw ctl Dyn_Dispatch enable 
C)  fw ctl multik set_mode 4 
D)  fw ctl multik set_mode 1

Question 3

What are the blades of Threat Prevention?

Accepted Answer

A)  IPS, DLP, AntiVirus, AntiBot, Sandblast Threat Emulation/Extraction 
B)  DLP, AntiVirus, QoS, AntiBot, Sandblast Threat Emulation/Extraction 
C)  IPS, AntiVirus, AntiBot 
D)  IPS, AntiVirus, AntiBot, Sandblast Threat Emulation/Extraction 
A)  IPS, DLP, AntiVirus, AntiBot, Sandblast Threat Emulation/Extraction 
B)  DLP, AntiVirus, QoS, AntiBot, Sandblast Threat Emulation/Extraction 
C)  IPS, AntiVirus, AntiBot 
D)  IPS, AntiVirus, AntiBot, Sandblast Threat Emulation/Extraction

Question 4

UserCheck objects in the Application Control and URL Filtering rules allow the gateway to communicate with the users. Which action is not supported in UserCheck objects?

Accepted Answer

A)  Ask 
B)  Drop 
C)  Inform 
D)  Reject 
A)  Ask 
B)  Drop 
C)  Inform 
D)  Reject

Question 5

Vanessa is firewall administrator in her company. Her company is using Check Point firewall on a central and several remote locations which are managed centrally by R77.30 Security Management Server. On central location is installed R77.30 Gateway on Open server. Remote locations are using Check Point UTM-1570 series appliances with R75.30 and some of them are using a UTM-1-Edge-X or Edge-W with latest available firmware. She is in process of migrating to R80. What can cause Vanessa unnecessary problems, if she didn't check all requirements for migration to R80?

Accepted Answer

A)  Missing an installed R77.20 Add-on on Security Management Server 
B)  Unsupported firmware on UTM-1 Edge-W appliance 
C)  Unsupported version on UTM-1 570 series appliance 
D)  Unsupported appliances on remote locations 
A)  Missing an installed R77.20 Add-on on Security Management Server 
B)  Unsupported firmware on UTM-1 Edge-W appliance 
C)  Unsupported version on UTM-1 570 series appliance 
D)  Unsupported appliances on remote locations

Question 6

The following command is used to verify the CPUSE version:

Accepted Answer

A)  HostName:0>show installer status build 
B)  [Expert@HostName:0]#show installer status 
C)  [Expert@HostName:0]#show installer status build 
D)  HostName:0>show installer build 
A)  HostName:0>show installer status build 
B)  [Expert@HostName:0]#show installer status 
C)  [Expert@HostName:0]#show installer status build 
D)  HostName:0>show installer build

Question 7

In CoreXL, the Firewall kernel is replicated multiple times, therefore:

Accepted Answer

A)  The Firewall kernel only touches the packet if the connection is accelerated 
B)  The Firewall can run different policies per core 
C)  The Firewall kernel is replicated only with new connections and deletes itself once the connection times out 
D)  The Firewall can run the same policy on all cores. 
A)  The Firewall kernel only touches the packet if the connection is accelerated 
B)  The Firewall can run different policies per core 
C)  The Firewall kernel is replicated only with new connections and deletes itself once the connection times out 
D)  The Firewall can run the same policy on all cores.

Question 8

Which of the following commands shows the status of processes?

Accepted Answer

A)  cpwd_admin -l 
B)  cpwd -l 
C)  cpwd admin_list 
D)  cpwd_admin list 
A)  cpwd_admin -l 
B)  cpwd -l 
C)  cpwd admin_list 
D)  cpwd_admin list

Question 9

Due to high CPU workload on the Security Gateway, the security administrator decided to purchase a new multicore CPU to replace the existing single core CPU. After installation, is the administrator required to perform any additional tasks?

Accepted Answer

A)  Run cprestart from clish 
B)  After upgrading the hardware, increase the number of kernel instances using cpconfig 
C)  Administrator does not need to perform any task. Check Point will make use of the newly installed CPU and Cores 
D)  Hyperthreading must be enabled in the bios to use CoreXL 
A)  Run cprestart from clish 
B)  After upgrading the hardware, increase the number of kernel instances using cpconfig 
C)  Administrator does not need to perform any task. Check Point will make use of the newly installed CPU and Cores 
D)  Hyperthreading must be enabled in the bios to use CoreXL

Question 10

How would you enable VMAC Mode in ClusterXL?

Accepted Answer

A)  Cluster Object -> Edit -> ClusterXL and VRRP -> Use Virtual MAC 
B)  fw ctl set int vmac_mode 1 
C)  cphaconf vmac_mode set 1 
D)  Cluster Object -> Edit -> Cluster Members -> Edit -> Use Virtual MAC 
A)  Cluster Object -> Edit -> ClusterXL and VRRP -> Use Virtual MAC 
B)  fw ctl set int vmac_mode 1 
C)  cphaconf vmac_mode set 1 
D)  Cluster Object -> Edit -> Cluster Members -> Edit -> Use Virtual MAC

Question 11

When deploying SandBlast, how would a Threat Emulation appliance benefit from the integration of ThreatCloud?

Accepted Answer

A)  ThreatCloud is a database-related application which is located on-premise to preserve privacy of company-related data 
B)  ThreatCloud is a collaboration platform for all the CheckPoint customers to form a virtual cloud consisting of a combination of all on-premise private cloud environments 
C)  ThreatCloud is a collaboration platform for Check Point customers to benefit from VMWare ESXi infrastructure which supports the Threat Emulation Appliances as virtual machines in the EMC Cloud 
D)  ThreatCloud is a collaboration platform for all the Check Point customers to share information about malicious and benign files that all of the customers can benefit from as it makes emulation of known files unnecessary 
A)  ThreatCloud is a database-related application which is located on-premise to preserve privacy of company-related data 
B)  ThreatCloud is a collaboration platform for all the CheckPoint customers to form a virtual cloud consisting of a combination of all on-premise private cloud environments 
C)  ThreatCloud is a collaboration platform for Check Point customers to benefit from VMWare ESXi infrastructure which supports the Threat Emulation Appliances as virtual machines in the EMC Cloud 
D)  ThreatCloud is a collaboration platform for all the Check Point customers to share information about malicious and benign files that all of the customers can benefit from as it makes emulation of known files unnecessary

Question 12

What state is the Management HA in when both members have different policies/databases?

Accepted Answer

A)  Synchronized 
B)  Never been synchronized 
C)  Lagging 
D)  Collision 
A)  Synchronized 
B)  Never been synchronized 
C)  Lagging 
D)  Collision

Question 13

If there are two administration logged in at the same time to the SmartConsole, and there are objects locked for editing, what must be done to make them available or other administrators? (Choose the BEST answer.)

Accepted Answer

A)  Publish or discard the session. 
B)  Revert the session. 
C)  Save and install the Policy. 
D)  Delete older versions of database. 
A)  Publish or discard the session. 
B)  Revert the session. 
C)  Save and install the Policy. 
D)  Delete older versions of database.

Question 14

What destination versions are supported for a Multi-Version Cluster Upgrade?

Accepted Answer

A)  R80.40 and later 
B)  R76 and later 
C)  R70 and Later 
D)  R80.10 and Later 
A)  R80.40 and later 
B)  R76 and later 
C)  R70 and Later 
D)  R80.10 and Later

Question 15

What is the least amount of CPU cores required to enable CoreXL?

Accepted Answer

A)  2 
B)  1 
C)  4 
D)  6 
A)  2 
B)  1 
C)  4 
D)  6

Question 16

You can access the ThreatCloud Repository from:

Accepted Answer

A)  R80.10 SmartConsole and Application Wiki 
B)  Threat Prevention and Threat Tools 
C)  Threat Wiki and Check Point Website 
D)  R80.10 SmartConsole and Threat Prevention 
A)  R80.10 SmartConsole and Application Wiki 
B)  Threat Prevention and Threat Tools 
C)  Threat Wiki and Check Point Website 
D)  R80.10 SmartConsole and Threat Prevention

Question 17

What is the command to check the status of Check Point processes?

Accepted Answer

A)  top 
B)  cptop 
C)  cphaprob list 
D)  cpws_admin list 
A)  top 
B)  cptop 
C)  cphaprob list 
D)  cpws_admin list

Question 18

What is correct statement about Security Gateway and Security Management Server failover in Check Point R80.X in terms of Check Point Redundancy driven solution?

Accepted Answer

A)  Security Gateway failover is an automatic procedure but Security Management Server failover is a manual procedure. 
B)  Security Gateway failover as well as Security Management Server failover is a manual procedure. 
C)  Security Gateway failover is a manual procedure but Security Management Server failover is an automatic procedure. 
D)  Security Gateway failover as well as Security Management Server failover is an automatic procedure. 
A)  Security Gateway failover is an automatic procedure but Security Management Server failover is a manual procedure. 
B)  Security Gateway failover as well as Security Management Server failover is a manual procedure. 
C)  Security Gateway failover is a manual procedure but Security Management Server failover is an automatic procedure. 
D)  Security Gateway failover as well as Security Management Server failover is an automatic procedure.

Question 19

View the rule below. What does the lock-symbol in the left column mean? (Choose the BEST answer.)

Accepted Answer

A)  The current administrator has read-only permissions to Threat Prevention Policy. 
B)  Another user has locked the rule for editing. 
C)  Configuration lock is present. Click the lock symbol to gain read-write access. 
D)  The current administrator is logged in as read-only because someone else is editing the policy. 
A)  The current administrator has read-only permissions to Threat Prevention Policy. 
B)  Another user has locked the rule for editing. 
C)  Configuration lock is present. Click the lock symbol to gain read-write access. 
D)  The current administrator is logged in as read-only because someone else is editing the policy.

Question 20

When using CPSTAT, what is the default port used by the AMON server?

Accepted Answer

A)  18191 
B)  18192 
C)  18194 
D)  18190 
A)  18191 
B)  18192 
C)  18194 
D)  18190

To fully enable Dynamic Dispatcher on a Security Gateway:

To enable Dynamic Dispatch on Security Gateway without the Firewall Priority Queues, run the following command in Expert mode and reboot:

What are the blades of Threat Prevention?

UserCheck objects in the Application Control and URL Filtering rules allow the gateway to communicate with the users. Which action is not supported in UserCheck objects?

The following command is used to verify the CPUSE version:

In CoreXL, the Firewall kernel is replicated multiple times, therefore:

Which of the following commands shows the status of processes?

Due to high CPU workload on the Security Gateway, the security administrator decided to purchase a new multicore CPU to replace the existing single core CPU. After installation, is the administrator required to perform any additional tasks?

How would you enable VMAC Mode in ClusterXL?

When deploying SandBlast, how would a Threat Emulation appliance benefit from the integration of ThreatCloud?

What state is the Management HA in when both members have different policies/databases?

If there are two administration logged in at the same time to the SmartConsole, and there are objects locked for editing, what must be done to make them available or other administrators? (Choose the BEST answer.)

What destination versions are supported for a Multi-Version Cluster Upgrade?

What is the least amount of CPU cores required to enable CoreXL?

You can access the ThreatCloud Repository from:

What is the command to check the status of Check Point processes?

What is correct statement about Security Gateway and Security Management Server failover in Check Point R80.X in terms of Check Point Redundancy driven solution?

View the rule below. What does the lock-symbol in the left column mean? (Choose the BEST answer.)

When using CPSTAT, what is the default port used by the AMON server?

Check Point Certified Security Principles Associate (CCSPA)

Check Point Certified Security Administrator (CCSA R80)

Filters

Exam 3: Check Point Certified Security Expert - R80

To fully enable Dynamic Dispatcher on a Security Gateway:

To enable Dynamic Dispatch on Security Gateway without the Firewall Priority Queues, run the following command in Expert mode and reboot:

What are the blades of Threat Prevention?

UserCheck objects in the Application Control and URL Filtering rules allow the gateway to communicate with the users. Which action is not supported in UserCheck objects?

The following command is used to verify the CPUSE version:

In CoreXL, the Firewall kernel is replicated multiple times, therefore:

Which of the following commands shows the status of processes?

Due to high CPU workload on the Security Gateway, the security administrator decided to purchase a new multicore CPU to replace the existing single core CPU. After installation, is the administrator required to perform any additional tasks?

How would you enable VMAC Mode in ClusterXL?

When deploying SandBlast, how would a Threat Emulation appliance benefit from the integration of ThreatCloud?

What state is the Management HA in when both members have different policies/databases?

If there are two administration logged in at the same time to the SmartConsole, and there are objects locked for editing, what must be done to make them available or other administrators? (Choose the BEST answer.)

What destination versions are supported for a Multi-Version Cluster Upgrade?

What is the least amount of CPU cores required to enable CoreXL?

You can access the ThreatCloud Repository from:

What is the command to check the status of Check Point processes?

What is correct statement about Security Gateway and Security Management Server failover in Check Point R80.X in terms of Check Point Redundancy driven solution?

View the rule below. What does the lock-symbol in the left column mean? (Choose the BEST answer.)

When using CPSTAT, what is the default port used by the AMON server?

Check Point Certified Security Principles Associate (CCSPA)

Check Point Certified Security Administrator (CCSA R80)

Filters