NEW QUESTION 1
When using LDAP as an authentication method for Identity Awareness, the query:

• A. Requires client and server side software.
• B. Prompts the user to enter credentials.
• C. Requires administrators to specifically allow LDAP traffic to and from the LDAP Server and the Security Gateway.
• D. Is transparent, requiring no client or server side software, or client intervention.

Answer: D

NEW QUESTION 2
How many users can have read/write access in Gaia at one time?

• A. Infinite
• B. One
• C. Three
• D. Two

Answer: B

NEW QUESTION 3
Fill in the blank: The command _____ provides the most complete restoration of a R80 configuration.

• A. upgrade_import
• B. cpconfig
• C. fwm dbimport -p <export file>
• D. cpinfo -recover

Answer: A

Explanation: (Should be "migrate import")
"migrate import" Restores backed up configuration for R80 version, in previous versions the command was " upgrade_import ".

NEW QUESTION 4
You are the administrator for ABC Corp. You have logged into your R80 Management server. You are making some changes in the Rule Base and notice that rule No.6 has a pencil icon next to it.

What does this mean?

• A. The rule No.6 has been marked for deletion in your Management session.
• B. The rule No.6 has been marked for deletion in another Management session.
• C. The rule No.6 has been marked for editing in your Management session.
• D. The rule No.6 has been marked for editing in another Management session.

Answer: C

NEW QUESTION 5
You want to define a selected administrator's permission to edit a layer. However, when you click the + sign in the “Select additional profile that will be able edit this layer” you do not see anything. What is the most likely cause of this problem? Select the BEST answer.

• A. “Edit layers by Software Blades” is unselected in the Permission Profile
• B. There are no permission profiles available and you need to create one first.
• C. All permission profiles are in use.
• D. “Edit layers by selected profiles in a layer editor” is unselected in the Permission profile.

Answer: B

NEW QUESTION 6
Sally has a Hot Fix Accumulator (HFA) she wants to install on her Security Gateway which operates with GAiA, but she cannot SCP the HFA to the system. She can SSH into the Security Gateway, but she has never been able to SCP files to it. What would be the most likely reason she cannot do so?

• A. She needs to edit /etc/SSHd/SSHd_config and add the Standard Mode account.
• B. She needs to run sysconfig and restart the SSH process.
• C. She needs to edit /etc/scpusers and add the Standard Mode account.
• D. She needs to run cpconfig to enable the ability to SCP files.

Answer: C

NEW QUESTION 7
Which of the following is NOT a component of Check Point Capsule?

• A. Capsule Docs
• B. Capsule Cloud
• C. Capsule Enterprise
• D. Capsule Workspace

Answer: C

NEW QUESTION 8
Fill in the blank: The R80 utility fw monitor is used to troubleshoot _______

• A. User data base corruption
• B. LDAP conflicts
• C. Traffic issues
• D. Phase two key negotiation

Answer: C

Explanation: Check Point's FW Monitor is a powerful built-in tool for capturing network traffic at the packet level. The Monitor utility captures network packets at multiple capture points along the FireWall inspection chains. These captured packets can be inspected later using the WireShark

NEW QUESTION 9
Access roles allow the firewall administrator to configure Network access according to:

• A. a combination of computer or computer groups and network
• B. users and user groups
• C. all of above
• D. remote access clients

Answer: C

NEW QUESTION 10
How many sessions can be opened on the Management Server at the same time?

• A. Unlimited, One per each licensed Gateway
• B. One
• C. Unlimited, Multiple per administrator
• D. Unlimited, One per administrator

Answer: D

NEW QUESTION 11
What happens when you run the command: fw sam -J src [Source IP Address]?

• A. Connections from the specified source are blocked without the need to change the Security Policy.
• B. Connections to the specified target are blocked without the need to change the Security Policy.
• C. Connections to and from the specified target are blocked without the need to change the Security Policy.
• D. Connections to and from the specified target are blocked with the need to change the Security Policy.

Answer: A

NEW QUESTION 12
Which Threat Prevention Software Blade provides comprehensive against malicious and unwanted network traffic, focusing on application and server vulnerabilities?

• A. Anti-Virus
• B. IPS
• C. Anti-Spam
• D. Anti-bot

Answer: B

Explanation: The IPS Software Blade provides a complete Intrusion Prevention System security solution, providing comprehensive network protection against malicious and unwanted network traffic, including:
Malware attacks
Dos and DDoS attacks
Application and server vulnerabilities
Insider threats
Unwanted application traffic, including IM and P2P

NEW QUESTION 13
Which configuration element determines which traffic should be encrypted into a VPN tunnel vs. sent in the clear?

• A. The firewall topologies
• B. NAT Rules
• C. The Rule Base
• D. The VPN Domains

Answer: C

NEW QUESTION 14
Under which file is the proxy arp configuration stored?

• A. $FWDIR/state/proxy_arp.conf on the management server
• B. $FWDIR/conf/local.arp on the management server
• C. $FWDIR/state/_tmp/proxy.arp on the security gateway
• D. $FWDIR/conf/local.arp on the gateway

Answer: D

NEW QUESTION 15
What is true about the IPS-Blade?

• A. in R80, IPS is managed by the Threat Prevention Policy
• B. in R80, in the IPS Layer, the only three possible actions are Basic, Optimized and Strict
• C. in R80, IPS Exceptions cannot be attached to “all rules”
• D. in R80, the GeoPolicy Exceptions and the Threat Prevention Exceptions are the same

Answer: A

NEW QUESTION 16
Katie has been asked to do a backup on the Blue Security Gateway. Which command would accomplish this in the Gaia CLI?

• A. Blue > add local backup
• B. Expert&Blue#add local backing
• C. Blue > set backup local
• D. Blue > add backup local

Answer: D

NEW QUESTION 17
Fill in the blank: A(n) _____ rule is created by an administrator and is located before the first and before last rules in the Rule Base.

• A. Firewall drop
• B. Explicit
• C. Implicit accept
• D. Implicit drop
• E. Implied

Answer: E

Explanation: This is the order that rules are enforced:
First Implied Rule: You cannot edit or delete this rule and no explicit rules can be placed before it.
Explicit Rules: These are rules that you create.
Before Last Implied Rules: These implied rules are applied before the last explicit rule.
Last Explicit Rule: We recommend that you use the Cleanup rule as the last explicit rule.
Last Implied Rules: Implied rules that are configured as Last in Global Properties.
Implied Drop Rule: Drops all packets without logging.

NEW QUESTION 18
Which message indicates IKE Phase 2 has completed successfully?

• A. Quick Mode Complete
• B. Aggressive Mode Complete
• C. Main Mode Complete
• D. IKE Mode Complete

Answer: A