Practice Q&As

Question 1

Which of the following is NOT an integral part of VPN communication within a network:
- VPN Key
- VPN Community
- VPN Trust Entities
- VPN Domain

Answer 1

VPN Key

✑ VPN trust entities, such as a Check Point Internal Certificate Authority (ICA). The ICA is part of the Check Point suite used for creating SIC trusted connection between Security Gateways, authenticating administrators and third party servers. The ICA provides certificates for internal Security Gateways and remote access clients which negotiate the VPN link.
✑ VPN Domain - A group of computers and networks connected to a VPN tunnel by one VPN gateway that handles encryption and protects the VPN Domain members.
✑ VPN Community - A named collection of VPN domains, each protected by a VPN gateway.

Question 2

How can you tell if another Checkpoint Admin is working on a rule, but has not published the changes?

Answer 2

There’s a little pencil symbol next to the rule.

Question 3

What encryption is used in SIC, and what does SIC stand for?

Answer 3

Gateways above R71 use AES128 for SIC, R71 and below use 3DES. SIC stands for Secure Internal Communications.

Question 4

What are the five types of SecureXL flow?

Answer 4

Accelerated Path (sometimes called “fastpath” or SXL)
F2V (Forward to Virtual Machine) Path
PSLXL Path (also called the “Medium Path” or “Passive Streaming”)
CPASXL Path (also called “Active Streaming”)
Firewall Path (also called “slowpath”, “non-accelerated”, or F2F)

Question 5

What are the three main components of the Checkpoint Three-tier architecture?

Answer 5

SmartConsole
Security Management Server
Security Gateway

Question 6

What is the main purpose of the SmartConsole?

Answer 6

SmartConsole is a GUI software installed on a windows platform allowing for centralised management of a Check Point environment

Question 7

What is the main purpose of the Security Management Server?

Answer 7

The Security Management Server is a dedicated server that runs Check Point software to manage the objects and policies in a Check Point environment. The Security Management Server is installed on a server running the Check Point Gaia OS.

Question 8

What is the main purpose of a security gateway?

Answer 8

The security gateway is essentially a firewall - it’s Check Points term for it

Question 9

What are the two main shells that the gaia OS provides?

Answer 9

Gaia Clish and Bash (Expert Mode)

Question 10

Which shell is the most restrictive

Answer 10

Clish

Question 11

What is the default shell?

Answer 11

Clish

Question 12

What is the default password for Expert Mode?

Answer 12

There is no default password, you must define it using the ‘set expert-password’ command

Question 13

What physical components may be represented by a network object?

Answer 13

A user, a server, a gateway, any physical components

Question 14

What logical components may be represented by a network object?

Answer 14

Applications, IP Ranges, Services etc

Question 15

What permissions profile allows unrestricted permissions?

Answer 15

Super User

Question 16

Name three types of Software Containers?

Answer 16

Security Management
Security Gateway
Endpoint Security

Question 17

What are the subscription blades?

Answer 17

Service blades such as IPS, URL Filtering, Application Control are considered subscription blades

Question 18

Name on reason to generate and install a new license?

Answer 18

Existing license expires
License is upgraded
IP address of the security management or security gateway has changed

Question 19

What types of rules are created by the security gateway?

Answer 19

Implied Rules

Question 20

What type of rules are created by the administrator?

Answer 20

Explicit Rules

Question 21

Where should the clean up rule be placed?

Answer 21

At the bottom of the rulebase

Question 22

What is the purpose of policy layers?

Answer 22

Policy layers are sets of rules or a rulebase. They let you divide up a policy into smaller, more manageable sections.

Question 23

What type of Policy layer is independent of the rest of the rulebase?

Answer 23

Inline

Question 24

List the two types of rules that Check Point NAT supports for address translation?

Answer 24

Automatic
Manual

Question 25

What is the difference between Hide NAT and Static NAT?

Answer 25

Hide NAT only allows outgoing connections, it translates many private addresses to one public address. Using Hide NAT, the defined hosts and networks share the same address when their traffic is routed by the gateway. (Standard NATing, different source ports are used to identify the internal IP address via NAT table) Static NAT allows for both incoming and outgoing connections, it involves the translation of one private IP address to a single unique public IP address.

Question 26

List at least two use cases for Application Control?

Answer 26

Learn about applications Create a granular policy Track employees online usage Keep policies updated

Question 27

How does URL filtering work?

Answer 27

URL Filtering works by comparing all web traffic against URL filters, which are typically contained in a database of sites that users are permitted to access / denied from accessing.

Question 28

What is the recommended profile supported by Autonomous Threat Prevention?

Answer 28

Perimeter

Question 29

What is a VPN Community?

Answer 29

A VPN Community is a named collection of VPN domains (hosts / networks that use the Security Gateway to send/receive VPN traffic). Each is protected by a VPN Gateway, all the attributes of the VPN tunnel are defined in the VPN Community.

Question 30

Define IKEv1 and IKEv2

Answer 30

IKEv1 is the default version which is supported on most new and old systems IKEv2 is the newer version supporting IPv6, but currently Check Point Remote Access VPN clients do not support it

Question 31

List the two topologies on which VPN communities can be based?

Answer 31

VPN communities can be based on Mesh and Star Topologies.

Question 32

Which tool can be used to collect and view logs and monitor devices?

Answer 32

SmartConsole

Question 33

How many logs are typically displayed in the default view?

Answer 33

50

Question 34

What information is available in the Gateway & Servers Monitor View?

Answer 34

Device Status License Status System Counters Traffic

Question 35

Give at least two situations in which a snapshot is recommended?

Answer 35

After a fresh installation of Gaia Before making a major configuration Before an upgrade or hotfix change

Question 36

Why is it recommended to schedule regular backups?

Answer 36

To preserve the Gaia OS configuration and Firewall database

Question 37

What is the preferred method of recovery?

Answer 37

Backup and restore

Question 38

In what compressed file format is a backup saved?

Answer 38

.tgz

Question 39

In order to modify security policies the administrator can use which of the following tools? 1) SmartConsole and WebUI on the Security Management Server 2) SmartConsole or mgmt_cli (API) on any computer where SmartConsole is installed 3) Command line of the Security Management Server or mgmt_cli.exe on any Windows Computer 4) mgmt_cli (API) or WebUI on Security Gateway, and SmartConsole on the Security Management Server

Answer 39

2

Question 40

What is the user ID of a user that have all the privileges of a root user? 1) User ID 1 2) User ID 2 3) User ID 0 4) User ID 99

Answer 40

3

Question 41

Which type of Check Point license ties the package license to the IP address of the SMS? 1) Local 2) Central 3) Corporate 4) Formal

Answer 41

2

Question 42

In HTTPS Inspection Policy, what actions are available in the 'Actions' column of the rule? 1) Inspect, Bypass 2) Inspect, Bypass, Categorise 3) Inspect, Bypass, Block 4) Detect, Bypass

Answer 42

1

Question 43

What is the main difference between Static NAT and Hide NAT? 1) Hide NAT only allows incoming connections to protect your network 2) Static NAT only allows outgoing connections, Hide NAT allows incoming and outgoing 3) Static NAT allows incoming and outgoing connections, Hide NAT only allows outgoing connections 4) Static NAT only allows incoming connections to protect your NAT

Answer 43

3

Question 44

When a SAM (suspicious activity monitoring) rule is required on a Security Gateway to quickly block suspicious connections which are not restricted by the security policy, what actions does the admin need to take? 1) SmartView Monitor should be opened and then the SAM rule can be applied immediately without needing to install policy 2) The policy type SAM must be added to the Policy Package and a new SAM rule must be applied. Simply publishing the changes applies the SAM rule on the firewall. 3) The administrator must work on the firewall CLI (for example with SSH / Putty) and the command 'sam block' must be used with the right parameters 4) the admin should open the logs and monitor view and find the relevant log, right clicking on the log entry will show the create new SAM rule option

Answer 44

1

Question 45

There are four policy types available for each policy package, what are they? 1) Access Control, Threat Prevention, Mobile Access and HTTPs inspection 2) Access Control, Custom Threat Prevention, Autonomous Threat Prevention and HTTPS Inspection 3) There are only three, Access Control, Threat Prevention and NAT 4) Access Control, threat Prevention, NAT and HTTPS Inspection

Answer 45

2

Question 46

Where can alerts be viewed? 1) Alerts can be seen from the CLI of the gateway 2) Alerts can be seen in SmartUpdate 3) Alerts can be seen in the Threat Prevention Policy 4) Alerts can be seen in SmartView Monitor

Answer 46

4

Question 47

In SmartConsole, on which tab are Permissions and Administrators defined? 1) GATEWAYS AND SERVERS 2) SECURITY POLICIES 3) MANAGE AND SETTINGS 4) LOGS AND MONITOR

Answer 47

3

Question 48

Which type of Check Point license is tied to the IP address of a specific security gateway and cannot be transferred to a gateway that has a different IP address? 1) Formal 2) Central 3) Corporate 4) Local

Answer 48

4

Question 49

Which product correlates logs and detects security threats, providing a centralized display of potential attack patterns from all network devices? 1) SmartView Monitor 2) SmartDashboard 3) SmartUpdate 4) SmartEvent

Answer 49

4

Question 50

Which back up method uses the command line to create an image of the OS? 1) System Backup 2) Save Configuration 3) snapshot 4) Migrate

Answer 50

3

Question 51

Which one of the following is the preferred licensing model? 1) Central licensing because it ties the package license to the IP address of the SMS and has no dependency on the gateway 2) Central licensing because it ties the package license to the MAC address of the SMS Mgmt interface and has no dependency on the gateway 3) Local licensing because it ties the package license to the IP address of the gateway and has no dependency on the SMS 4) Local licensing because it ties the package license to the MAC address of the gateway management interface and has no SMS dependency

Answer 51

1

Question 52

What is the purpose of Captive Portal? 1) It provides remote access to SmartConsole 2) It authenticates users, allowing them access to the internet and corporate resources 3) It authenticates users, allowing them access to the Gaia OS 4) It manages user permission in SmartConsole

Answer 52

2

Question 53

When you upload a package or license to the appropriate repository in SmartUpdate, where is the package or license stored? 1) SmartConsole Installed device 2) Check point user centre 3) SMS 4) Security Gateway

Answer 53

3

Question 54

Fill in the blank, once a license is activated, a _____ should be installed. 1) Security Gateway Contract File 2) Service Contract File 3) License Management File 4) License Contract file

Answer 54

2

Question 55

A layer can support different combinations of Blades, what are the support blades? 1) Firewall, URLF, Content Awareness and Mobile Access 2) Firewall (Network Access control), Application & URL Filtering, Content Awareness and Mobile Access 3) Firewall, NAT, Content Awareness and Mobile Access 4) Firewall (Network Access Control), Application & URL Filtering and Content Awareness

Answer 55

4

Question 56

If there is a Accept implied policy set to 'first', what is the reason Jorge cannot see any logs? 1) Log implied rule was not set correctly on the track column on the rules base 2) Track log column is set to log, not full log 3) Track log column is set to none 4) Log implied rule was not selected on Global Properties

Answer 56

4

Question 57

Where can alerts be viewed? 1) Alerts can be seen in SmartView Monitor 2) Alerts can be seen in the Threat Prevention Policy 3) Alerts can be seen in SmartUpdate 4) Alerts can be seen from the CLI of the gateway

Answer 57

1

Question 58

What CheckPoint technologies deny or permit network traffic? 1) Application Control, DLP 2) ACL, SandBlast, MPT 3) IPS, Mobile Threat protection 4) Packet Filtering, Stateful Inspection, Application Layer Firewall

Answer 58

4

Question 59

Which of the following technologies extracts detailed information from packets and stores that information in state tables? 1) INSPECT engine 2) Stateful Inspection 3) Packet Filtering 4) Application Layer Firewall

Answer 59

1

Question 60

In the Check Point three-tiered architecture, which of the following is NOT a function of the SMS? 1) Display policies and logs on the admins workstation 2) verify and compile Security Policies 3) Processing and sending alerts such as SNMP traps and email notifications 4) Store firewall logs to hard drive storage

Answer 60

1 - SmartConsole does this

Question 61

What is not an advantage of Packet Filtering? Low Security and no screening above network layer Application independence High performance Scalability

Answer 61

Low security and no screening above network layer

Question 62

To enforce the security policy correctly, a security gateway requires 1) A routing table 2) awareness of the network topology 3) A DMZ 4) A security policy install

Answer 62

2

Question 63

in SmartConsole, objects are used to represent physical and virtual network components and also some logical components. These objects are divided into several categories, which of the following is NOT a object category? 1) Network Object 2) Limit 3) Custom Application / Site 4) Resource

Answer 63

4

Question 64

DLP and Geo Policy are examples of what type of policies? 1) Standard policies 2) Inspection policies 3) Unified Policies 4) Shared Policies

Answer 64

4

Question 65

What two ordered layers make up the Access Control Policy Layer? 1) URL Filtering and Network 2) Network and Threat Prevention 3) Application Control and URL Filtering 4) Network and Application Control

Answer 65

4

Question 66

Harriet wants to protect sensitive information from intentional loss when users browser to a specific URL: https://personal.mymail.com. Which blade will she enable to achieve her goal? 1) Application Control 2) SSL Inspection 3) URL Filtering 4) DLP

Answer 66

4

Question 67

The ______ software blade enables Application Security policies to allow, block or limit website access based on user, group and machine identities. 1) URL Filtering 2) Application Control 3) Data Awareness 4) Threat Emulation

Answer 67

1

Question 68

How do you manage Gaia? 1) Through SmartConsole only 2) Through CLI and WebUI 3) Through CLI only 4) Through CLI, WebUI and SmartConsole

Answer 68

2

Question 69

What is the implicit clean up rule? 1) A setting that is configured per Policy Layer 2) Another name for the clean up rule 3) A rule automatically created when the clean up rule is defined 4) A setting that is defined in the Global Properties for all policies

Answer 69

4

Question 70

Which threat prevention software blade provides comprehensive protection against malicious and unwanted network traffic - focusing on application and server vulnerabilities? 1) Antivirus 2) IPS 3) Anti-spam 4) Anti-bot

Answer 70

2

Question 71

Which check point software blade provides protection from zero day and undiscovered threats? 1) Firewall 2) Application Control 3) Threat Extraction 4) Threat Emulation

Answer 71

4

Question 72

The _____ software blade enables Application Security policies to allow, block, or limit website access based on user, group and machine identities. 1) URL Filtering 2) Application Control 3) Monitoring 4) Threat Emulation

Answer 72

1

Question 73

Which Check Point software blade monitors Check Point devices and provides a picture of network and security performance 1) Application Control 2) Threat Extraction 3) Compliance 4) Monitoring

Answer 73

Monitoring

Question 74

Which check point software blade provides visibility of users, groups and machines while also providing access control through identity based policies? 1) URL Filtering 2) Firewall 3) Identity Awareness 4) Application Control

Answer 74

3 - Identity Awareness

Question 75

Fill in the blank: _____ information is included in the "Full Log" tracking option, but is not included in the "Log" tracking option? 1) Destination Port 2) Data Type 3) File Attributes 4) Application

Answer 75

2 - Data type

Question 76

The hit count feature allows tracking the number of connections that each rule matches. Will the feature work independently from logging and track the hits even if the track option is set to 'None'? 1) No - it will not work independently. Hit count will be shown only for rules with Track option set as Log or Alert. 2) Yes it will work independently as long as 'analyze all rules' is enabled in the security gateway. 3) No - it will not work independently because hit count requires all rules to be logged 4) Yes it will work independently because when you enable Hit Count, the SMS collects the data from the supported gateways

Answer 76

4

Question 77

Which of the following is NOT a tracking option? Partial Log Log Network Log Full Log

Answer 77

Partial Log

Question 78

Which of the following is the most secure means of authentication? Password Certificate Token Pre-shared secret

Answer 78

Certificate

Question 79

Fill in the blank: the most important part of a site-to-site vpn deployment is the _____ Internet Remote users Encrypted VPN tunnel VPN Gateways

Answer 79

Encrypted VPN tunnel

Question 80

Which of the following is NOT an integral part of VPN communication within a network? VPN Key VPN Community VPN Trust Entities VPN Domain

Answer 80

VPN key

Question 81

Phase 1 of the two-phase negotiation process conducted by IKE operates in ____ mode. Main Authentication Quick High Alert

Answer 81

Main

Question 82

Fill in the blank: when LDAP is integrated with Check Point Security Management, it is then referred to as ______ UserCheck User Directory User Administration User Centre

Answer 82

User Directory

Question 83

Fill in the blank: An Endpoint Identity Agent uses a _____ for user authentication Shared Secret Token Username/Password or Kerberos ticket Certificate

Answer 83

username/password or kerberos ticket

Question 84

Which of the following is an identity acquisition method that allows a security gateway to identify AD users and computers? UserCheck Active Directory Query Account Unit Query User Directory Query

Answer 84

Active directory query

Question 85

Fill in the blank, an LDAP servers holds one or more ____ Server Units Administrator Units Account Units Account Servers

Answer 85

Administrator Units

Question 86

When defining group based access in an LDAP environment with Identity Awareness, what is the BEST object type to represent an LDAP group in a security policy? Access Role user Group SmartDirectory Group Group Template

Answer 86

Access Role

Question 87

Which of the following ClusterXL modes uses a non-unicast MAC address for the cluster IP address? High Availability Master/Backup Load Sharing Pivot Load Sharing Multicast

Answer 87

Load Sharing Multicast

Question 88

Check Point ClusterXL active/active deployment is used when? Only when there is a multicast solution set up When there is a Load Sharing solution set up Only when there is a unicast solution set up When there is a high availability solution set up

Answer 88

When there is a load sharing solution set up

Question 89

What protocol is specifically used for clustered environments? Cluster Protocol Synchronized Cluster Protocol Control Cluster Protocol Cluster Control Protocol

Answer 89

Cluster Control Protocol

Question 90

Fill in the blank: Each cluster has ____ interfaces Three Five Two Four

Answer 90

Three

Question 91

Bob and Joe both have admin roles on their Gaia platform. Bob logs in on the WebUI and Joe logs in through CLI. Choose what BEST describes the following scenario, where Bob and Joe are logged in? When Joe logs in, Bob will be logged out automatically Since they are both logging in on different machines, they will both be able to make changes If Joe tries to make a change, he can't because the database will be locked Bob will be prompted that Joe logs in

Answer 91

If Joe tries to make a change, he can't because the database is locked

Question 92

Which utility allows you to configure the DHCP service on Gaia from the command line? ifconfig dhcp_cfg sysconfig cpconfig

Answer 92

sysconfig

Question 93

Which default Gaia user has full read/write access? Superuser Monitor Altuser admin

Answer 93

admin

Question 94

Which icon in the WebUI indicates that read/write access is enabled? Eyeglasses Pencil Padlock Book

Answer 94

Pencil

Question 95

Which SmartConsole tab is used to monitor network and security performance? Logs Monitor Manage Settings Security Policies Gateway Servers

Answer 95

Logs Monitor

Question 96

Check Point Update Service Engine (CPUSE), also known as Deployment Agent (DA), is an advanced and intuitive mechanism for software deployment on Gaia OS. What software packages are supported for deployment? It supports deployments of single HotFixes (HF), and of Major Versions. Blink packages and hotfix accumulators (jumbo) are not supported. It supports deployments of single hotfixes (HF), of Hotfix accumulators (jumbo) and of major versions. It supports deployments of major versions and blink packages only It supports deployments of single hotfixes (HF), of hotfix accumulators (jumbo) but not of major versions.

Answer 96

It supports deployments of single hotfixes (HF), of HotFix accumulators (jumbo) and of major versions

Question 97

In SmartConsole, on which tab are Permissions and Administrators defined? Manage & Settings Security Policies Gateways and Servers Logs and Monitors

Answer 97

Manage and Settings

Question 98

Which tool allows automatic update of Gaia OS and Check Point products installed on Gaia OS? CPDAS - Check Point deployment agent service CPUSE - Check Point Upgrade Service Engine CPASE - Check Point Automatic Service Engine CPAUE - Check Point Automatic Update Engine

Answer 98

CPUSE

Question 99

In the Check Point three tiered architecture, which of the following is NOT a function of the SMS? Verify and compile security policies Display policies and logs on the admin workstation Store firewall logs to hard drive storage Manage the object database

Answer 99

Display policies and logs on the admin workstation

Question 100

True or false; More than one admin can log into the SMS with SmartConsole with write permissions at the same time? True - every admin works on a different database that is independent of the other admin False - only one admin can login with write permission True - every admin works in a session that is independent of other admins False - this feature has to be enabled in Global Properties

Answer 100

True - every admin works in a session that is independent of other admins

Question 101

What Check Point tool is used to automatically update Check Point products Gaia OS? Check Point Update Engine Check Point Upgrade Installation Service Check Point Upgrade Service Engine (CPUSE) Check Point Inspect Engine

Answer 101

CPUSE

Question 102

If there are two admins logged in at the same time to the smartconsole, and there are objects locked for editing, what must be done to make them available to other administrators? Choose the BEST answer: Delete older versions of the database Publish or discard the session Revert the session Save and install the policy

Answer 102

Publish or discard the session

Question 103

What are the two deployment options available for a security gateway Bridge and switch Local and remote Cloud and router Standalone and Distributed

Answer 103

Standalone and distributed

Question 104

One of the major features in SmartConsole is concurrent administration. Which of the following is NOT possible considering that AdminA, AdminB and AdminC are editting the same Security Policy? AdminB sees a pencil icon next to the rule that AdminB is currently editting AdminA, AdminB and AdminC are editting three different rules at the same time AdminA and AdminB are editing the same rule at the same time AdminC sees a lock icon which indicates that the rule is locked for editting by another admin

Answer 104

AdminA and AdminB are editting the same rule at the same time

Question 105

A Check Point Software license consists of two components - the software blade and the software container. There are _____ types of Software Containers: ______. Two; Security Management and Endpoint Security Three; Security Management, Security Gateway and Endpoint Security Three; Security Gateway, Endpoint Security and Gateway Management Two; Endpoint Security and Security Gateway

Answer 105

Three; Security Management, Security Gateway and Endpoint Security

Question 106

Which type of Check Point license is tied to the IP address of a specific Security Gateway and cannot be transferred to another gateway with a different IP address. Formal Central Local Corporate

Answer 106

Local

Question 107

Tom has connected to a Management Server remotely using SmartConsole and is in the process of making some Rule Base changes, when suddenly he loses connectivity. Connectivity is restored shortly afterward, what will happen to the changes already made? Tom will have to reboot his SmartConsole computer, and access the Management cache store on that computer, which is only accessible after a reboot Tom will have to reboot his SmartConsole computer, clear the cache and restore changes. Tom's changes will have been stored on the Management Server when he reconnects and he will not lose any of his work Toms changes will be lost since he lost connectivity and he will have to start again

Answer 107

Tom's changes will have been stored on the Management Server when he reconnects and he will not lose any of his work

Question 108

In which deployment is the security management server and security gateway installed on the same appliance? Switch Standalone Distributed Remote

Answer 108

Standalone

Question 109

Which software blade enables Access Control policies to accept, drop, or limit web site access based on user, group and/or machine? Data Awareness Threat Emulation Application Control Identity Awareness

Answer 109

Identity Awareness

Question 110

DLP and Mobile Access Policy are examples of what type of policy? Shared Policies Unified Policies Inspection Policies Standard Policies

Answer 110

Shared Policies

Question 111

What is the default shell of Gaia CLI? Read-only Expert Clish Bash

Answer 111

Clish

Question 112

Which of the following is NOT a valid application navigation tab in SmartConsole? WEBUI & COMMAND LINE SECURITY POLICIES GATEWAYS & SERVERS LOGS & MONITOR

Answer 112

WEBUI & COMMAND LINE

Question 113

What are two basic rules Check Point recommends for building an effective security policy? Accept Rule and Drop Rule Explicit Rule and Implied Rule Cleanup Rule and Stealth Rule NAT Rule and Reject Rule

Answer 113

Cleanup Rule and Stealth Rule

Question 114

When dealing with policy layers, what two layer types can be utilised? Inbound Layers and Outbound Layers Ordered layers and inline layers Structured layers and overlap layers R81.X does not support layers

Answer 114

Ordered layers and inline layers

Question 115

What are the three main components of Check Point Security Management Architecture?

Answer 115

SmartConsole, Security Management Server, Security Gateway

Question 116

Which Check Point software blade provides protection from zero days and undiscovered threats? Threat Extraction Threat Emulation Firewall Application Control

Answer 116

Threat Emulation

Question 117

What are the three types of UserCheck messages? Ask, block and notify block, action and warn action, inform and ask inform, ask and drop

Answer 117

Ask, block and notify

Question 118

By default, which port is used to connect to the Gaia portal? 4434 80 8080 443

Answer 118

443

Question 119

Choose what BEST describes a session? Sessions end when policy is pushed to the Security Gateway Sessions lock the policy package for editing Starts when an admin logs in through SmartConsole and ends when the admin logs out Starts when an admin publishes all changes made on SmartConsole

Answer 119

Starts when an admin logs in through SmartConsole and ends when the admin logs out

Question 120

Which command shows detailed information about VPN tunnels? cat $FWDIR/conf/vpn.conf vpn tu tlist vpn tu cpview

Answer 120

vpn tu

Question 121

After a new log server is added to the environment and the SIC trust has been established with the SMS, what will the gateways do? Gateways will send firewall logs to the new Log Server as soon as the SIC trust is set up between the SMS and the new log server Logs are not automatically forwarded to a new log server. SmartConsole must be used to manually configure each gateway to send it's logs to the server. The firewalls will detect the new log server after the next policy install and redirect the new logs to the new Log Server The gateways can only send logs to an SMS and cannot send logs to a log server. Log servers are proprietary log archive servers.

Answer 121

Logs are not automatically forwarded to a new log server, SmartConsole must be used to manually configure each gateway to send its logs to the server.

Question 122

In order for changes made to policy to be enforced by a security gateway, what action must a admin perform? Publish Changes Save Changes Install Policy Install Database

Answer 122

Install database

Question 123

Name the file that is an electronically signed file used by Check Point to translate the features in the license into a code? Both license (.lic) and contract (.xml) file cp.macro contract file (.xml) license file (.lic)

Answer 123

cp.macro - A $CPDIR/conf/cp.macro file is an electronically signed file used by the Check Point software to translate the features included within the installed license (s) file into code, or primitives.

Question 124

Which two identity awareness daemons are used to support identity sharing? Policy Activation Point (PAP) and Policy Decision Point (PDP) Policy Manipulation Point (PMP) and Policy Activation Point (PAP) Policy Enforcement Point (PEP) and Policy Manipulation Point (PMP) Policy Decision Point (PDP) and Policy Enforcement Point (PEP)

Answer 124

Policy Decision Point (PDP) and Policy enforcement point (PEP)

Question 125

In which scenario will an admin need to manually define Proxy ARP? When they configure an automatic static NAT which translates to an IP address that does not belong to one of the firewalls interfaces When they configure an automatic hide NAT which translates to an IP address that does not belong to one of the firewalls interfaces When they configure a Manual Static NAT which translates to an IP address that does not belong to one of the firewalls interfaces When they configure a Manual Hide NAT which translates to an IP address that belongs to one of the firewalls interfaces

Answer 125

When they configure a Manual Static NAT which translates to an IP address that does not belong to one of the firewalls interfaces

Question 126

When enabling tracking on a rule, what is the default option? Accounting Log Extended Log Log Detailed Log

Answer 126

Log

Question 127

Gaia includes Check Point Upgrade Service Engine (CPUSE), which can directly receive updates for which components? The Security Gateway and Security Management Server software and the CPUSE engine Licensed Check Point products for the Gaia OS and the Gaia OS itself The CPUSE engine and the Gaia OS The Gaia OS only

Answer 127

Licensed Check Point products for the Gaia OS and the Gaia OS itself

Question 128

Authentication rules are defined for ____ Individual users All users in the database Users using usercheck User groups

Answer 128

User Groups

Question 129

Which routing protocols are supported by the Gaia OS? BGP, OSPF, RIP BGP, OSPF, RIP, EIGRP BGP, OSPF, EIGRP, PIM, IGMP BGP, OSPF, RIP, PIM, IGMP

Answer 129

BGP, OSPF, RIP