NEW QUESTION 1
You want to store the GAiA configuration in a file for later reference. What command should you use?

• A. write mem <filename>
• B. show config -f <filename>
• C. save config -o <filename>
• D. save configuration <filename>

Answer: D

NEW QUESTION 2
You manage a global network extending from your base in Chicago to Tokyo, Calcutta and Dallas. Management wants a report detailing the current software level of each Enterprise class Security Gateway. You plan to take the opportunity to create a proposal outline, listing the most cost-effective way to upgrade your Gateways. Which two SmartConsole applications will you use to create this report and outline?

• A. SmartView Tracker and SmartView Monitor
• B. SmartLSM and SmartUpdate
• C. SmartDashboard and SmartView Tracker
• D. SmartView Monitor and SmartUpdate

Answer: D

NEW QUESTION 3
Which is a suitable command to check whether Drop Templates are activated or not?

• A. fw ctl get int activate_drop_templates
• B. fwaccel stat
• C. fwaccel stats
• D. fw ctl templates –d

Answer: B

NEW QUESTION 4
MegaCorp's security infrastructure separates Security Gateways geographically. You must request a central license for one remote Security Gateway.
How do you apply the license?

• A. Using the remote Gateway's IP address, and attaching the license to the remote Gateway via SmartUpdate.
• B. Using your Security Management Server's IP address, and attaching the license to the remote Gateway via SmartUpdate.
• C. Using the remote Gateway's IP address, and applying the license locally with command cplic put.
• D. Using each of the Gateway's IP addresses, and applying the licenses on the Security Management Server with the command cprlic put.

Answer: B

NEW QUESTION 5
You have just installed your Gateway and want to analyze the packet size distribution of your traffic with SmartView Monitor.

Unfortunately, you get the message:
“There are no machines that contain Firewall Blade and SmartView Monitor”.
What should you do to analyze the packet size distribution of your traffic? Give the BEST answer.

• A. Purchase the SmartView Monitor license for your Security Management Server.
• B. Enable Monitoring on your Security Management Server.
• C. Purchase the SmartView Monitor license for your Security Gateway.
• D. Enable Monitoring on your Security Gateway.

Answer: D

NEW QUESTION 6
Which of the following is NOT a tracking option?

• A. Partial log
• B. Log
• C. Network log
• D. Full log

Answer: A

NEW QUESTION 7
Which command is used to obtain the configuration lock in Gaia?

• A. Lock database override
• B. Unlock database override
• C. Unlock database lock
• D. Lock database user

Answer: A

Explanation: Obtaining a Configuration Lock
lock database override
unlock database

NEW QUESTION 8
What is the main difference between Threat Extraction and Threat Emulation?

• A. Threat Emulation never delivers a file and takes more than 3 minutes to complete
• B. Threat Extraction always delivers a file and takes less than a second to complete
• C. Threat Emulation never delivers a file that takes less than a second to complete
• D. Threat Extraction never delivers a file and takes more than 3 minutes to complete

Answer: B

NEW QUESTION 9
Fill in the blanks: A _____ license requires an administrator to designate a gateway for attachment whereas a _____ license is automatically attached to a Security Gateway.

• A. Format; corporate
• B. Local; formal
• C. Local; central
• D. Central; local

Answer: D

NEW QUESTION 10
Which of the following is a hash algorithm?

• A. 3DES
• B. IDEA
• C. DES
• D. MD5

Answer: D

NEW QUESTION 11
Look at the screenshot below. What CLISH command provides this output?

• A. show configuration all
• B. show confd configuration
• C. show confd configuration all
• D. show configuration

Answer: D

NEW QUESTION 12
As you review this Security Policy, what changes could you make to accommodate Rule 4?

• A. Remove the service HTTP from the column Service in Rule 4.
• B. Modify the column VPN in Rule 2 to limit access to specific traffic.
• C. Nothing at all
• D. Modify the columns Source or Destination in Rule 4

Answer: B

NEW QUESTION 13
Which Threat Prevention Profile is not included by default in R80 Management?

• A. Basic – Provides reliable protection on a range of non-HTTP protocols for servers, with minimal impact on network performance
• B. Optimized – Provides excellent protection for common network products and protocols against recent or popular attacks
• C. Strict – Provides a wide coverage for all products and protocols, with impact on network performance
• D. Recommended – Provides all protection for all common network products and servers, with impact on network performance

Answer: D

NEW QUESTION 14
Joey is using the computer with IP address 192.168.20.13. He wants to access web page “www.Check Point.com”, which is hosted on Web server with IP address 203.0.113.111. How many rules on Check Point Firewall are required for this connection?

• A. Two rules – first one for the HTTP traffic and second one for DNS traffic.
• B. Only one rule, because Check Point firewall is a Packet Filtering firewall
• C. Two rules – one for outgoing request and second one for incoming replay.
• D. Only one rule, because Check Point firewall is using Stateful Inspection technology.

Answer: D

NEW QUESTION 15
ABC Corp has a new administrator who logs into the Gaia Portal to make some changes. He realizes that even though he has logged in as an administrator, he is unable to make any changes because all configuration options are greyed out as shown in the screenshot image below. What is the likely cause for this?

• A. The Gaia /bin/confd is locked by another administrator from a SmartConsole session.
• B. The database is locked by another administrator SSH session.
• C. The Network address of his computer is in the blocked hosts.
• D. The IP address of his computer is not in the allowed hosts.

Answer: B

Explanation: There is a lock on top left side of the screen. B is the logical answer.

NEW QUESTION 16
Which of the following licenses are considered temporary?

• A. Perpetual and Trial
• B. Plug-and-play and Evaluation
• C. Subscription and Perpetual
• D. Evaluation and Subscription

Answer: B

Explanation: Should be Trial or Evaluation, even Plug-and-play (all are synonyms ). Answer B is the best choice.

NEW QUESTION 17
What are the three components for Check Point Capsule?

• A. Capsule Docs, Capsule Cloud, Capsule Connect
• B. Capsule Workspace, Capsule Cloud, Capsule Connect
• C. Capsule Workspace, Capsule Docs, Capsule Connect
• D. Capsule Workspace, Capsule Docs, Capsule Cloud

Answer: D

NEW QUESTION 18
Which limitation of CoreXL is overcome by using (mitigated by) Multi-Queue?

• A. There is no traffic queue to be handled
• B. Several NICs can use one traffic queue by one CPU
• C. Each NIC has several traffic queues that are handled by multiple CPU cores
• D. Each NIC has one traffic queue that is handled by one CPU

Answer: C