NEW QUESTION 1
Which utility allows you to configure the DHCP service on GAIA from the command line?

• A. ifconfig
• B. dhcp_cfg
• C. sysconfig
• D. cpconfig

Answer: C

Explanation: Sysconfig Configuration Options

NEW QUESTION 2
What does it mean if Bob gets this result on an object search? Refer to the image below. Choose the BEST answer.

• A. Search detailed is missing the subnet mask.
• B. There is no object on the database with that name or that IP address.
• C. There is no object on the database with that IP address.
• D. Object does not have a NAT IP address.

Answer: B

NEW QUESTION 3
What is the mechanism behind Threat Extraction?

• A. This is a new mechanism which extracts malicious files from a document to use it as a counter-attack against its sender
• B. This is a new mechanism which is able to collect malicious files out of any kind of file types to destroy it prior to sending it to the intended recipient
• C. This is a new mechanism to identify the IP address of the sender of malicious codes and to put it into the SAM database (Suspicious Activity Monitoring).
• D. Any active contents of a document, such as JavaScripts, macros and links will be removed from the document and forwarded to the intended recipient, which makes this solution very fast

Answer: D

NEW QUESTION 4
What command would show the API server status?

• A. cpm status
• B. api restart
• C. api status
• D. show api status

Answer: D

NEW QUESTION 5
Which SmartConsole component can Administrators use to track changes to the Rule Base?

• A. WebUI
• B. SmartView Tracker
• C. SmartView Monitor
• D. SmartReporter

Answer: B

NEW QUESTION 6
Which back up utility captures the most information and tends to create the largest archives?

• A. backup
• B. snapshot
• C. Database Revision
• D. migrate export

Answer: B

NEW QUESTION 7
In SmartEvent, what are the different types of automatic reactions that the administrator can configure?

• A. Mail, Block Source, Block Event Activity, External Script, SNMP Trap
• B. Mail, Block Source, Block Destination, Block Services, SNMP Trap
• C. Mail, Block Source, Block Destination, External Script, SNMP Trap
• D. Mail, Block Source, Block Event Activity, Packet Capture, SNMP Trap

Answer: A

NEW QUESTION 8
The Firewall kernel is replicated multiple times, therefore:

• A. The Firewall kernel only touches the packet if the connection is accelerated
• B. The Firewall can run different policies per core
• C. The Firewall kernel is replicated only with new connections and deletes itself once the connection times out
• D. The Firewall can run the same policy on all cores

Answer: D

NEW QUESTION 9
Using R80 Smart Console, what does a “pencil icon” in a rule mean?

• A. I have changed this rule
• B. Someone else has changed this rule
• C. This rule is managed by check point’s SOC
• D. This rule can’t be changed as it’s an implied rule

Answer: A

NEW QUESTION 10
Fill in the blank: Once a license is activated, a ____ should be installed.

• A. License Management file
• B. Security Gateway Contract file
• C. Service Contract file
• D. License Contract file

Answer: C

Explanation: Service Contract File
Following the activation of the license, a Service Contract File should be installed. This file contains important information about all subscriptions purchased for a specific device and is installed via SmartUpdate. A detailed Explanation: of the Service Contract File can be found in sk33089.

NEW QUESTION 11
Which statement is NOT TRUE about Delta synchronization?

• A. Using UDP Multicast or Broadcast on port 8161
• B. Using UDP Multicast or Broadcast on port 8116
• C. Quicker than Full sync
• D. Transfers changes in the Kernel tables between cluster members

Answer: A

NEW QUESTION 12
Which command can you use to verify the number of active concurrent connections?

• A. fw conn all
• B. fw ctl pst pstat
• C. show all connections
• D. show connections

Answer: B

NEW QUESTION 13
What is the default shell of Gaia CLI?

• A. Monitor
• B. CLI.sh
• C. Read-only
• D. Bash

Answer: B

Explanation: This chapter gives an introduction to the Gaia command line interface (CLI). The default shell of the CLI is called clish.

NEW QUESTION 14
How are the backups stored in Chock Point appliances?

• A. Saved as * .tar under /var/log/Cpbackup/backups
• B. Saved as * .tgz under /var/cppbackup
• C. Saved as * .tar under /var/cppbackup
• D. Saved as * .tgz under /var/log/CPbackup/backups

Answer: D

NEW QUESTION 15
Using ClusterXL, what statement is true about the Sticky Decision Function?

• A. Can only be changed for Load Sharing implementations
• B. All connections are processed and synchronized by the pivot
• C. Is configured using cpconfig
• D. Is only relevant when using SecureXL

Answer: A

NEW QUESTION 16
Where does the security administrator activate Identity Awareness within SmartDashboard?

• A. Gateway Object > General Properties
• B. Security Management Server > Identity Awareness
• C. Policy > Global Properties > Identity Awareness
• D. LDAP Server Object > General Properties

Answer: A

NEW QUESTION 17
Which the following type of authentication on Mobile Access can NOT be used as the first authentication method?

• A. Dynamic ID
• B. RADIUS
• C. Username and Password
• D. Certificate

Answer: A

NEW QUESTION 18
Which of the following firewall modes DOES NOT allow for Identity Awareness to be deployed?

• A. Bridge
• B. Load Sharing
• C. High Availability
• D. Fail Open

Answer: A