Q1. - (Topic 1) 

What is the primary benefit of using the command upgrade_export over either backup or snapshot? 

A. The commands backup and snapshot can take a long time to run whereas upgrade_export will take a much shorter amount of time. 

B. upgrade_export will back up routing tables, hosts files, and manual ARP configurations, where backup and snapshot will not. 

C. upgrade_export has an option to back up the system and SmartView Tracker logs while backup and snapshot will not. 

D. upgrade_export is operating system independent and can be used when backup or snapshot is not available. 

View Answer

Q2. - (Topic 3) 

Match the terms with their definitions: 

A. A-3, B-4, C-1, D-2 

B. A-2, B-3, C-4, D-1 

C. A-3, B-2, C-1, D-4 

D. A-3, B-2, C-4, D-1 

View Answer

Q3. - (Topic 1) 

You have configured SNX on the Security Gateway. The client connects to the Security Gateway and the user enters the authentication credentials. What must happen after authentication that allows the client to connect to the Security Gateway's VPN domain? 

A. Active-X must be allowed on the client. 

B. The SNX client application must be installed on the client. 

C. SNX modifies the routing table to forward VPN traffic to the Security Gateway. 

D. An office mode address must be obtained by the client. 

View Answer

Q4. - (Topic 2) 

A marketing firm's networking team is trying to troubleshoot user complaints regarding access to audio-streaming material from the Internet. The networking team asks you to check the object and rule configuration settings for the perimeter Security Gateway. Which SmartConsole application should you use to check these objects and rules? 

A. SmartView Tracker 

B. SmartView Monitor 

C. SmartDashboard 

D. SmartView Status 

View Answer

Q5. - (Topic 3) 

You are the Security Administrator for MegaCorp. A Check Point firewall is installed and in use on a platform using GAiA. You have trouble configuring the speed and duplex settings of your Ethernet interfaces. Which of the following commands can be used in CLISH to configure the speed and duplex settings of an Ethernet interface and will survive a reboot? Give the BEST answer. 

A. ethtool 

B. set interface <options> 

C. mii_tool 

D. ifconfig -a 

View Answer

Q6. - (Topic 2) 

You are working with three other Security Administrators. Which SmartConsole component can be used to monitor changes to rules or object properties made by the other administrators? 

A. Eventia Tracker 

B. SmartView Monitor 

C. Eventia Monitor 

D. SmartView Tracker 

View Answer

Q7. - (Topic 3) 

What is a possible reason for the IKE failure shown in this screenshot? 

A. Mismatch in preshared secrets. 

B. Mismatch in Diffie-Hellman group. 

C. Mismatch in VPN Domains. 

D. Mismatch in encryption schemes. 

View Answer

Q8. - (Topic 3) 

Your users are defined in a Windows 2008 R2 Active Directory server. You must add LDAP users to a Client Authentication rule. Which kind of user group do you need in the Client Authentication rule in R77? 

A. All Users 

B. External-user group 

C. A group with a generic user 

D. LDAP group 

View Answer

Q9. - (Topic 3) 

What gives administrators more flexibility when configuring Captive Portal instead of LDAP query for Identity Awareness authentication? 

A. Captive Portal is more secure than standard LDAP 

B. Captive Portal is more transparent to the user 

C. Nothing, LDAP query is required when configuring Captive Portal 

D. Captive Portal works with both configured users and guests 

View Answer

Q10. - (Topic 1) 

Although SIC was already established and running, Joe reset SIC between the Security Management Server and a remote Gateway. He set a new activation key on the Gateway's side with the command cpconfig and put in the same activation key in the Gateway's object on the Security Management Server. Unfortunately, SIC cannot be established. What is a possible reason for the problem? 

A. Joe forgot to exit from cpconfig. 

B. The installed policy blocks the communication. 

C. The old Gateway object should have been deleted and recreated. 

D. Joe forgot to reboot the Gateway. 

View Answer