Question 1

Which command shows actual allowed connections in state table?

Accepted Answer

A)  fw tab -t StateTable 
B)  fw tab -t connections 
C)  fw tab -t connection 
D)  fw tab connections 
A)  fw tab -t StateTable 
B)  fw tab -t connections 
C)  fw tab -t connection 
D)  fw tab connections

Question 2

Matt wants to upgrade his old Security Management Server to R80.x using the Advanced Upgrade with Database Migration. What is one of the requirements for a successful upgrade?

Accepted Answer

A)  Size of the /var/log folder of the source machine must be at least 25% of the size of the /var/log directory on the target machine 
B)  Size of the /var/log folder of the target machine must be at least 25% of the size of the /var/log directory on the source machine 
C)  Size of the $FWDIR/log folder of the target machine must be at least 25% of the size of the $FWDIR/log directory on the source machine 
D)  Size of the /var/log folder of the target machine must be at least 25GB or more 
A)  Size of the /var/log folder of the source machine must be at least 25% of the size of the /var/log directory on the target machine 
B)  Size of the /var/log folder of the target machine must be at least 25% of the size of the /var/log directory on the source machine 
C)  Size of the $FWDIR/log folder of the target machine must be at least 25% of the size of the $FWDIR/log directory on the source machine 
D)  Size of the /var/log folder of the target machine must be at least 25GB or more

Question 3

After finishing installation admin John likes to use top command in expert mode. John has to set the expert-password and was able to use top command. A week later John has to use the top command again, He detected that the expert password is no longer valid. What is the most probable reason for this behavior?

Accepted Answer

A)  "write memory" was not issued on clish 
B)  changes are only possible via SmartConsole 
C)  "save config" was not issued in expert mode 
D)  "save config" was not issued on clish 
A)  "write memory" was not issued on clish 
B)  changes are only possible via SmartConsole 
C)  "save config" was not issued in expert mode 
D)  "save config" was not issued on clish

Question 4

Which statements below are CORRECT regarding Threat Prevention profiles in SmartDashboard?

Accepted Answer

A)  You can assign only one profile per gateway and a profile can be assigned to one rule Only. 
B)  You can assign multiple profiles per gateway and a profile can be assigned to one rule only. 
C)  You can assign multiple profiles per gateway and a profile can be assigned to one or more rules. 
D)  You can assign only one profile per gateway and a profile can be assigned to one or more rules. 
A)  You can assign only one profile per gateway and a profile can be assigned to one rule Only. 
B)  You can assign multiple profiles per gateway and a profile can be assigned to one rule only. 
C)  You can assign multiple profiles per gateway and a profile can be assigned to one or more rules. 
D)  You can assign only one profile per gateway and a profile can be assigned to one or more rules.

Question 5

Please choose the path to monitor the compliance status of the Check Point R80.10 based management.

Accepted Answer

A)  Gateways & Servers --> Compliance View 
B)  Compliance blade not available under R80.10 
C)  Logs & Monitor --> New Tab --> Open compliance View 
D)  Security & Policies --> New Tab --> Compliance View 
A)  Gateways & Servers --> Compliance View 
B)  Compliance blade not available under R80.10 
C)  Logs & Monitor --> New Tab --> Open compliance View 
D)  Security & Policies --> New Tab --> Compliance View

Question 6

Which of the following type of authentication on Mobile Access can NOT be used as the first authentication method?

Accepted Answer

A)  Dynamic ID 
B)  RADIUS 
C)  Username and Password 
D)  Certificate 
A)  Dynamic ID 
B)  RADIUS 
C)  Username and Password 
D)  Certificate

Question 7

What is the name of the secure application for Mail/Calendar for mobile devices?

Accepted Answer

A)  Capsule Workspace 
B)  Capsule Mail 
C)  Capsule VPN 
D)  Secure Workspace 
A)  Capsule Workspace 
B)  Capsule Mail 
C)  Capsule VPN 
D)  Secure Workspace

Question 8

What does the Log "Views" tab show when SmartEvent is Correlating events?

Accepted Answer

A)  A list of common reports 
B)  Reports for customization 
C)  Top events with charts and graphs 
D)  Details of a selected logs 
A)  A list of common reports 
B)  Reports for customization 
C)  Top events with charts and graphs 
D)  Details of a selected logs

Question 9

When performing a minimal effort upgrade, what will happen to the network traffic?

Accepted Answer

A)  All connections that were initiated before the upgrade will be dropped, causing network downtime 
B)  All connections that were initiated before the upgrade will be handled normally 
C)  All connections that were initiated before the upgrade will be handled by the standby gateway 
D)  All connections that were initiated before the upgrade will be handled by the active gateway 
A)  All connections that were initiated before the upgrade will be dropped, causing network downtime 
B)  All connections that were initiated before the upgrade will be handled normally 
C)  All connections that were initiated before the upgrade will be handled by the standby gateway 
D)  All connections that were initiated before the upgrade will be handled by the active gateway

Question 10

What command can you use to have cpinfo display all installed hotfixes?

Accepted Answer

A)  cpinfo -hf 
B)  cpinfo -y all 
C)  cpinfo -get hf 
D)  cpinfo installed_jumbo 
A)  cpinfo -hf 
B)  cpinfo -y all 
C)  cpinfo -get hf 
D)  cpinfo installed_jumbo

Question 11

What is the difference between an event and a log?

Accepted Answer

A)  Events are generated at gateway according to Event Policy 
B)  A log entry becomes an event when it matches any rule defined in Event Policy 
C)  Events are collected with SmartWorkflow form Trouble Ticket systems 
D)  Log and Events are synonyms 
A)  Events are generated at gateway according to Event Policy 
B)  A log entry becomes an event when it matches any rule defined in Event Policy 
C)  Events are collected with SmartWorkflow form Trouble Ticket systems 
D)  Log and Events are synonyms

Question 12

Which of the following is a task of the CPD process?

Accepted Answer

A)  Invoke and monitor critical processes and attempts to restart them if they fail 
B)  Transfers messages between Firewall processes 
C)  Log forwarding 
D)  Responsible for processing most traffic on a security gateway 
A)  Invoke and monitor critical processes and attempts to restart them if they fail 
B)  Transfers messages between Firewall processes 
C)  Log forwarding 
D)  Responsible for processing most traffic on a security gateway

Question 13

The essential means by which state synchronization works to provide failover in the event an active member goes down, ____________ is used specifically for clustered environments to allow gateways to report their own state and learn about the states of other members in the cluster.

Accepted Answer

A)  ccp 
B)  cphaconf 
C)  cphad 
D)  cphastart 
A)  ccp 
B)  cphaconf 
C)  cphad 
D)  cphastart

Question 14

Which command gives us a perspective of the number of kernel tables?

Accepted Answer

A)  fw tab -t 
B)  fw tab -s 
C)  fw tab -n 
D)  fw tab -k 
A)  fw tab -t 
B)  fw tab -s 
C)  fw tab -n 
D)  fw tab -k

Question 15

Which command lists all tables in Gaia?

Accepted Answer

A)  fw tab -t 
B)  fw tab -list 
C)  fw-tab -s 
D)  fw tab -1 
A)  fw tab -t 
B)  fw tab -list 
C)  fw-tab -s 
D)  fw tab -1

Question 16

You have successfully backed up Management Server configurations without the OS information. What command would you use to restore this backup?

Accepted Answer

A)  restore_backup 
B)  import backup 
C)  cp_merge 
D)  migrate import 
A)  restore_backup 
B)  import backup 
C)  cp_merge 
D)  migrate import

Question 17

Both ClusterXL and VRRP are fully supported by Gaia R80.10 and available to all Check Point appliances. Which the following command is NOT related to redundancy and functions?

Accepted Answer

A)  cphaprob stat 
B)  cphaprob -a if 
C)  cphaprob -l list 
D)  cphaprob all show stat 
A)  cphaprob stat 
B)  cphaprob -a if 
C)  cphaprob -l list 
D)  cphaprob all show stat

Question 18

Which command is used to display status information for various components?

Accepted Answer

A)  show all systems 
B)  show system messages 
C)  sysmess all 
D)  show sysenv all 
A)  show all systems 
B)  show system messages 
C)  sysmess all 
D)  show sysenv all

Question 19

In SmartEvent, what are different types of automatic reactions that the administrator can configure?

Accepted Answer

A)  Mail, Block Source, Block Event Activity, External Script, SNMP Trap 
B)  Mail, Block Source, Block Destination, Block Services, SNMP Trap 
C)  Mail, Block Source, Block Destination, External Script, SNMP Trap 
D)  Mail, Block Source, Block Event Activity, Packet Capture, SNMP Trap 
A)  Mail, Block Source, Block Event Activity, External Script, SNMP Trap 
B)  Mail, Block Source, Block Destination, Block Services, SNMP Trap 
C)  Mail, Block Source, Block Destination, External Script, SNMP Trap 
D)  Mail, Block Source, Block Event Activity, Packet Capture, SNMP Trap

Question 20

You can select the file types that are sent for emulation for all the Threat Prevention profiles. Each profile defines a(n) _____ or ______ action for the file types.

Accepted Answer

A)  Inspect/Bypass 
B)  Inspect/Prevent 
C)  Prevent/Bypass 
D)  Detect/Bypass 
A)  Inspect/Bypass 
B)  Inspect/Prevent 
C)  Prevent/Bypass 
D)  Detect/Bypass

Which command shows actual allowed connections in state table?

Matt wants to upgrade his old Security Management Server to R80.x using the Advanced Upgrade with Database Migration. What is one of the requirements for a successful upgrade?

Which statements below are CORRECT regarding Threat Prevention profiles in SmartDashboard?

Please choose the path to monitor the compliance status of the Check Point R80.10 based management.

Which of the following type of authentication on Mobile Access can NOT be used as the first authentication method?

What is the name of the secure application for Mail/Calendar for mobile devices?

What does the Log "Views" tab show when SmartEvent is Correlating events?

When performing a minimal effort upgrade, what will happen to the network traffic?

What command can you use to have cpinfo display all installed hotfixes?

What is the difference between an event and a log?

Which of the following is a task of the CPD process?

The essential means by which state synchronization works to provide failover in the event an active member goes down, ____________ is used specifically for clustered environments to allow gateways to report their own state and learn about the states of other members in the cluster.

Which command gives us a perspective of the number of kernel tables?

Which command lists all tables in Gaia?

You have successfully backed up Management Server configurations without the OS information. What command would you use to restore this backup?

Both ClusterXL and VRRP are fully supported by Gaia R80.10 and available to all Check Point appliances. Which the following command is NOT related to redundancy and functions?

Which command is used to display status information for various components?

In SmartEvent, what are different types of automatic reactions that the administrator can configure?

You can select the file types that are sent for emulation for all the Threat Prevention profiles. Each profile defines a(n) _ or __ action for the file types.

Check Point Certified Security Principles Associate (CCSPA)

Check Point Certified Security Administrator (CCSA R80)

Filters

Exam 3: Check Point Certified Security Expert - R80

Which command shows actual allowed connections in state table?

Matt wants to upgrade his old Security Management Server to R80.x using the Advanced Upgrade with Database Migration. What is one of the requirements for a successful upgrade?

Which statements below are CORRECT regarding Threat Prevention profiles in SmartDashboard?

Please choose the path to monitor the compliance status of the Check Point R80.10 based management.

Which of the following type of authentication on Mobile Access can NOT be used as the first authentication method?

What is the name of the secure application for Mail/Calendar for mobile devices?

What does the Log "Views" tab show when SmartEvent is Correlating events?

When performing a minimal effort upgrade, what will happen to the network traffic?

What command can you use to have cpinfo display all installed hotfixes?

What is the difference between an event and a log?

Which of the following is a task of the CPD process?

The essential means by which state synchronization works to provide failover in the event an active member goes down, ____________ is used specifically for clustered environments to allow gateways to report their own state and learn about the states of other members in the cluster.

Which command gives us a perspective of the number of kernel tables?

Which command lists all tables in Gaia?

You have successfully backed up Management Server configurations without the OS information. What command would you use to restore this backup?

Both ClusterXL and VRRP are fully supported by Gaia R80.10 and available to all Check Point appliances. Which the following command is NOT related to redundancy and functions?

Which command is used to display status information for various components?

In SmartEvent, what are different types of automatic reactions that the administrator can configure?

You can select the file types that are sent for emulation for all the Threat Prevention profiles. Each profile defines a(n) _____ or ______ action for the file types.

Check Point Certified Security Principles Associate (CCSPA)

Check Point Certified Security Administrator (CCSA R80)

Filters

You can select the file types that are sent for emulation for all the Threat Prevention profiles. Each profile defines a(n) _ or __ action for the file types.