Question 1

Fill in the blanks: There are ________ types of software containers ________.

Accepted Answer

A)  Three; security management, Security Gateway, and endpoint security 
B)  Three; Security gateway, endpoint security, and gateway management 
C)  Two; security management and endpoint security 
D)  Two; endpoint security and Security Gateway

Question 2

RADIUS Accounting gets ______ data from requests generated by the accounting client

Accepted Answer

A)  Destination 
B)  Identity 
C)  Payload 
D)  Location

Question 3

Fill in the blank: When tunnel test packets no longer invoke a response, SmartView Monitor displays _____________ for the given VPN tunnel.

Accepted Answer

A)  Down 
B)  No Response 
C)  Inactive 
D)  Failed

Question 4

Can a Check Point gateway translate both source IP address and destination IP address in a given packet?

Accepted Answer

A)  Yes. 
B)  No. 
C)  Yes, but only when using Automatic NAT. 
D)  Yes, but only when using Manual NAT.

Question 5

When defining group-based access in an LDAP environment with Identity Awareness, what is the BEST object type to represent an LDAP group in a Security Policy?

Accepted Answer

A)  Access Role 
B)  User Group 
C)  SmartDirectory Group 
D)  Group Template

Question 6

Identity Awareness allows the Security Administrator to configure network access based on which of the following?

Accepted Answer

A)  Name of the application, identity of the user, and identity of the machine 
B)  Identity of the machine, username, and certificate 
C)  Network location, identity of a user, and identity of a machine 
D)  Browser-Based Authentication, identity of a user, and network location

Question 7

When logging in for the first time to a Security management Server through SmartConsole, a fingerprint is saved to the:

Accepted Answer

A)  Security Management Server's /home/.fgpt file and is available for future SmartConsole authentications. Security Management Server's /home/.fgpt file and is available for future SmartConsole authentications. 
B)  Windows registry is available for future Security Management Server authentications. 
C)  There is no memory used for saving a fingerprint anyway. 
D)  SmartConsole cache is available for future Security Management Server authentications.

Question 8

What needs to be configured if the NAT property 'Translate destination on client side' is not enabled in Global properties?

Accepted Answer

A)  A host route to route to the destination IP 
B)  Use the file local.arp to add the ARP entries for NAT to work Use the file local.arp to add the ARP entries for NAT to work 
C)  Nothing, the Gateway takes care of all details necessary 
D)  Enabling 'Allow bi-directional NAT' for NAT to work correctly

Question 9

Which of the following is NOT a method used by Identity Awareness for acquiring identity?

Accepted Answer

A)  RADIUS 
B)  Active Directory Query 
C)  Remote Access 
D)  Certificates

Question 10

A(n) _____ rule is created by an administrator and is located before the first and before last rules in the Rule Base.

Accepted Answer

A)  Firewall drop 
B)  Explicit 
C)  Implicit accept 
D)  Implicit drop 
E)  Implied

Question 11

You have configured SNX on the Security Gateway. The client connects to the Security Gateway and the user enters the authentication credentials. What must happen after authentication that allows the client to connect to the Security Gateway's VPN domain?

Accepted Answer

A)  SNX modifies the routing table to forward VPN traffic to the Security Gateway. 
B)  An office mode address must be obtained by the client. 
C)  The SNX client application must be installed on the client. 
D)  Active-X must be allowed on the client.

Question 12

Which product correlates logs and detects security threats, providing a centralized display of potential attack patterns from all network devices?

Accepted Answer

A)  SmartView Monitor 
B)  SmartEvent 
C)  SmartUpdate 
D)  SmartDashboard

Question 13

Which is NOT an encryption algorithm that can be used in an IPSEC Security Association (Phase 2)?

Accepted Answer

A)  AES-GCM-256 
B)  AES-CBC-256 
C)  AES-GCM-128 
D)  DES

Question 14

You work as a security administrator for a large company. CSO of your company has attended a security conference where he has learnt how hackers constantly modify their strategies and techniques to evade detection and reach corporate resources. He wants to make sure that his company has the right protections in place. Check Point has been selected for the security vendor. Which Check Point products protects BEST against malware and zero-day attacks while ensuring quick delivery of safe content to your users?

Accepted Answer

A)  IPS and Application Control 
B)  IPS, anti-virus and anti-bot 
C)  IPS, anti-virus and e-mail security 
D)  SandBlast

Question 15

A new license should be generated and installed in all of the following situations EXCEPT when ________ .

Accepted Answer

A)  The license is attached to the wrong Security Gateway 
B)  The existing license expires 
C)  The license is upgraded 
D)  The IP address of the Security Management or Security Gateway has changed

Question 16

View the rule below. What does the pen-symbol in the left column mean?

Accepted Answer

A)  Those rules have been published in the current session. 
B)  Rules have been edited by the logged in administrator, but the policy has not been published yet. 
C)  Another user has currently locked the rules for editing. 
D)  The configuration lock is present. Click the pen symbol in order to gain the lock.

Question 17

Phase 1 of the two-phase negotiation process conducted by IKE operates in ______ mode.

Accepted Answer

A)  Main 
B)  Authentication 
C)  Quick 
D)  High Alert

Question 18

Two administrators Dave and Jon both manage R80 Management as administrators for ABC Corp. Jon logged into the R80 Management and then shortly after Dave logged in to the same server. They are both in the Security Policies view. From the screenshots below, why does Dave not have the rule no.6 in his SmartConsole view even though Jon has it his in his SmartConsole view?

Accepted Answer

A)  Jon is currently editing rule no.6 but has Published part of his changes. 
B)  Dave is currently editing rule no.6 and has marked this rule for deletion. 
C)  Dave is currently editing rule no.6 and has deleted it from his Rule Base. 
D)  Jon is currently editing rule no.6 but has not yet Published his changes.

Question 19

Which utility allows you to configure the DHCP service on GAIA from the command line?

Accepted Answer

A)  ifconfig 
B)  dhcp_cfg 
C)  sysconfig 
D)  cpconfig

Question 20

Which of the following is NOT a component of a Distinguished Name?

Accepted Answer

A)  Organizational Unit 
B)  Country 
C)  Common Name 
D)  User container

Exam 2: Check Point Certified Security Administrator (CCSA R80)

Fill in the blanks: There are types of software containers .