Q1. - (Topic 1) 

Which of the following is a CLI command for Security Gateway R77? 

A. fw merge 

B. fw tab -u 

C. fw shutdown 

D. fwm policy_print <policyname> 

View Answer

Q2. - (Topic 1) 

Peter is your new Security Administrator. On his first working day, he is very nervous and enters the wrong password three times. His account is locked. What can be done to unlock Peter's account? Give the BEST answer. 

A. It is not possible to unlock Peter's account. You have to install the firewall once again or abstain from Peter's help. 

B. You can unlock Peter's account by using the command fwm unlock_admin -u Peter on the Security Gateway. 

C. You can unlock Peter's account by using the command fwm lock_admin -u Peter on the Security Management Server. 

D. You can unlock Peter's account by using the command fwm unlock_admin -u Peter on the Security Management Server 

View Answer

Q3. - (Topic 2) 

What information is found in the SmartView Tracker Management log? 

A. Destination IP address 

B. SIC revoke certificate event 

C. Number of concurrent IKE negotiations 

D. Most accessed Rule Base rule 

View Answer

Q4. - (Topic 1) 

When you change an implicit rule's order from Last to First in Global Properties, how do you make the change take effect? 

A. Run fw fetch from the Security Gateway. 

B. Select Install Database from the Policy menu. 

C. Reinstall the Security Policy. 

D. Select Save from the File menu. 

View Answer

Q5. - (Topic 3) 

MegaCorp's security infrastructure separates Security Gateways geographically. You must request a central license for one remote Security Gateway. How do you apply the license? 

A. Using each of the Gateways' IP addresses, and applying the licenses on the Security Management Server with the command cprlic put. 

B. Using the remote Gateway's IP address, and applying the license locally with the command cplic put. 

C. Using your Security Management Server's IP address, and attaching the license to the remote Gateway via SmartUpdate. 

D. Using the remote Gateway's IP address, and attaching the license to the remote Gateway via SmartUpdate. 

View Answer

Q6. - (Topic 1) 

Which of the following are available SmartConsole clients which can be installed from the R77 Windows CD? Read all answers and select the most complete and valid list. 

A. SmartView Tracker, CPINFO, SmartUpdate 

B. SmartView Tracker, SmartDashboard, SmartLSM, SmartView Monitor 

C. SmartView Tracker, SmartDashboard, CPINFO, SmartUpdate, SmartView Status 

D. Security Policy Editor, Log Viewer, Real Time Monitor GUI 

View Answer

Q7. - (Topic 1) 

The customer has a small Check Point installation which includes one Windows 2008 server as SmartConsole and Security Management Server with a second server running SecurePlatform as Security Gateway. This is an example of a(n): 

A. Stand-Alone Installation. 

B. Distributed Installation. 

C. Hybrid Installation. 

D. Unsupported configuration. 

View Answer

Q8. - (Topic 3) 

The customer has a small Check Point installation which includes one Windows 2008 server as the SmartConsole and a second server running GAiA as both Security Management Server and the Security Gateway. This is an example of a(n): 

A. Distributed Installation 

B. Unsupported configuration 

C. Hybrid Installation 

D. Stand-Alone Installation 

View Answer

Q9. - (Topic 3) 

Which of the following authentication methods can be configured in the Identity Awareness setup wizard? 

A. Captive Portal 

B. TACACS 

C. Check Point Password 

D. Windows password 

View Answer

Q10. - (Topic 3) 

When using vpn tu, which option must you choose if you only want to clear phase 2 for a specific IP (gateway)? 

A. (8) Delete all IPsec+IKE SAs for a given User (Client) 

B. (5) Delete all IPsec SAs for a given peer (GW) 

C. (6) Delete all IPsec SAs for a given User (Client) 

D. (7) Delete all IPsec+IKE SAs for a given peer (GW) 

View Answer