Q8. Which of the following is a CLI command for Security Gateway R80?

A. fw tab -u

B. fw shutdown

C. fw merge

D. fwm policy_print <policyname>

View Answer

Q9. The CDT utility supports which of the following?

A. Major version upgrades to R77.30

B. Only Jumbo HFAu2021s and hotfixes

C. Only major version upgrades to R80.10

D. All upgrades

View Answer

Q10. Paul has just joined the MegaCorp security administration team. Natalie, the administrator, creates a new administrator account for Paul in SmartDashboard and installs the policy. When Paul tries to login it fails. How can Natalie verify whether Paulu2021s IP address is predefined on the security management server?

A. Login to Smart Dashboard, access Properties of the SMS, and verify whether Paulu2021s IP address is listed.

B. Type cpconfig on the Management Server and select the option u201cGUI client Listu201d to see if Paulu2021s IP address is listed.

C. Login in to Smart Dashboard, access Global Properties, and select Security Management, to verify whether Paulu2021s IP address is listed.

D. Access the WEBUI on the Security Gateway, and verify whether Paulu2021s IP address is listed as a GUI client.

View Answer

Q11. In a zero downtime scenario, which command do you run manually after all cluster members are upgraded?

View Answer

Q12. Which is a suitable command to check whether Drop Templates are activated or not?

A. fw ctl get int activate _drop_ templates

B. fwaccel stat

C. fwaccel stats

D. fw ctl templates u2013d

View Answer

Q13. Before upgrading SecurePlatform to GAiA, you should create a backup. To save time, many administrators use the command backup. This creates a backup of the Check Point configuration as well as the system configuration.

An administrator has installed the latest HFA on the system for fixing traffic problem after creating a backup file. There is a mistake in the very complex static routing configuration. The Check Point configuration has not been changed. Can the administrator use a restore to fix the errors in static routing?

A. The restore is not possible because the backup file does not have the same build number (version).

B. The restore is done by selecting Snapshot Management from the boot menu of GAiA.

C. The restore can be done easily by the command restore and copying netconf.C from the production environment.

D. A backup cannot be restored, because the binary files are missing.

View Answer

Q14. What is the purpose of Priority Delta in VRRP?

A. When a box is up, Effective Priority = Priority + Priority Delta

B. When an Interface is up, Effective Priority = Priority + Priority Delta

C. When an Interface fail, Effective Priority = Priority u2013 Priority Delta

D. When a box fail, Effective Priority = Priority u2013 Priority Delta

View Answer

Q15. When defining QoS global properties, which option below is not valid?

A. Weight

B. Authenticated timeout

C. Schedule

D. Rate

View Answer

Q16. Which of the following statements accurately describes the command upgrade_export?

A. upgrade_export stores network-configuration data, objects, global properties, and the database revisions prior to upgrading the Security Management Server.

B. Used primarily when upgrading the Security Management Server, upgrade_export stores all object databases and the /conf directories for importing to a newer Security Gateway version.

C. upgrade_export is used when upgrading the Security Gateway, and allows certain files to be included or excluded before exporting.

D. This command is no longer supported in GAiA.

View Answer

Q17. You have a diskless appliance platform. How do you keep swap file wear to a minimum?

A. Issue FW-1 bases its package structure on the Security Management Server, dynamically loading when the firewall is booted.

B. The external PCMCIA-based flash extension has the swap file mapped to it, allowing easy replacement.

C. Use PRAM flash devices, eliminating the longevity.

D. A RAM drive reduces the swap file thrashing which causes fast wear on the device.

View Answer