NEW QUESTION 1
Update the new topology in the cluster object from SmartDashboard.

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 2

You want to implement Static Destination NAT in order to provide external, Internet users access to an internal Web Server that has a reserved (RFC 1918) IP address. You have an unused valid IP address on the network between your Security Gateway and ISP router. You control the router that sits between the firewall external interface and the Internet.
What is an alternative configuration if proxy ARP cannot be used on your Security Gateway?

• A. Publish a proxy ARP entry on the ISP router instead of the firewall for the valid IP address.
• B. Place a static ARP entry on the ISP router for the valid IP address to the firewall's external address.
• C. Publish a proxy ARP entry on the internal Web server instead of the firewall for the valid IP address.
• D. Place a static host route on the firewall for the valid IP address to the internal Web server.

Answer: B

NEW QUESTION 3

MultiCorp has bought company OmniCorp and now has two active AD domains. How would you deploy Identity Awareness in this environment?

• A. You must run an ADquery for every domain.
• B. Identity Awareness can only manage one AD domain.
• C. Only one ADquery is necessary to ask for all domains.
• D. Only Captive Portal can be used.

Answer: A

NEW QUESTION 4

Which command would provide the most comprehensive diagnostic information to Check Point Technical Support?

• A. fw cpinfo
• B. cpinfo -o date.cpinfo.txt
• C. diag
• D. cpstat - date.cpstat.txt

Answer: B

NEW QUESTION 5

Which of the following authentication methods can be configured in the Identity Awareness setup wizard?

• A. TACACS
• B. Captive Portal
• C. Check Point Password
• D. Windows password

Answer: B

NEW QUESTION 6
CORRECT TEXT
Type the full fw command and syntax that allows you to disable only sync on a cluster firewall member.

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 7

Which three of the following are ClusterXL member requirements?
1) same operating systems
2) same Check Point version
3) same appliance model
4) same policy

• A. 1, 3, and 4
• B. 1, 2, and 4
• C. 2, 3, and 4
• D. 1, 2, and 3

Answer: B

NEW QUESTION 8

What is the officially accepted diagnostic tool for IP Appliance Support?

• A. ipsoinfo
• B. CST
• C. uag-diag
• D. cpinfo

Answer: B

NEW QUESTION 9

What command with appropriate switches would you use to test Identity Awareness connectivity?

• A. test_ldap
• B. test_ad_connectivity
• C. test_ldap_connectivity
• D. test_ad

Answer: B

NEW QUESTION 10

Many companies have defined more than one administrator. To increase security, only one administrator should be able to install a Rule Base on a specific Firewall. How do you configure this?

• A. Define a permission profile in SmartDashboard with read/write privileges, but restrict it to all other firewalls by placing them in the Policy Targets fiel
• B. Then, an administrator with this permission profile cannot install a policy on any Firewall not listed here.
• C. Put the one administrator in an Administrator group and configure this group in the specific Firewall object in Advanced > Permission to Install.
• D. In the object General Properties representing the specific Firewall, go to the Software Blades product list and select Firewal
• E. Right-click in the menu, select Administrator to Install to define only this administrator.
• F. Right-click on the object representing the specific administrator, and select that Firewall in Policy Targets.

Answer: B

NEW QUESTION 11

Looking at the SYN packets in the Wireshark output, select the statement that is true about
NAT.

• A. This is an example of Hide NAT.
• B. There is not enough information provided in the Wireshark capture to determine the NAT settings.
• C. This is an example of Static NAT and Translate destination on client side unchecked in Global Properties.
• D. This is an example of Static NAT and Translate destination on client side checked in Global Properties.

Answer: D

NEW QUESTION 12

You are the Security Administrator for ABC-Corp. A Check Point Firewall is installed and in use on GAiA. You are concerned that the system might not be retaining your entries for the interfaces and routing configuration. You would like to verify your entries in the corresponding file(s) on GAiA. Where can you view them? Give the BEST answer.

• A. /etc/sysconfig/netconf.C
• B. /etc/conf/route.C
• C. /etc/sysconfig/network-scripts/ifcfg-ethx
• D. /etc/sysconfig/network

Answer: A

NEW QUESTION 13

You have a diskless appliance platform. How do you keep swap file wear to a minimum?

• A. Issue FW-1 bases its package structure on the Security Management Server, dynamically loading when the firewall is booted.
• B. The external PCMCIA-based flash extension has the swap file mapped to it, allowing easy replacement.
• C. Use PRAM flash devices, eliminating the longevity.
• D. A RAM drive reduces the swap file thrashing which causes fast wear on the device.

Answer: D

NEW QUESTION 14
CORRECT TEXT
Fill in the blank.

In New Mode HA, the internal cluster IP VIP address is 10.4.8.3. The internal interfaces on two members are 10.4.8.1 and 10.4.8.2 Internal host 10.4.8.108 pings 10.4.8.3, and receives replies. Review the ARP table from the internal Windows host 10.4.8.108. According to the output, which member is the standby machine?

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 15

Select the command set best used to verify proper failover function of a new ClusterXL configuration.

• A. reboot
• B. cphaprob -d failDevice -s problem -t 0 register / cphaprob -d failDevice unregister
• C. clusterXL_admin down / clusterXL_admin up
• D. cpstop/cpstart

Answer: C

NEW QUESTION 16
......