Q6. MegaCorp is using SmartCenter Server with several gateways. Their requirements result in a heavy log load. Would it be feasible to add the SmartEvent Correlation Unit and SmartEvent Server to their SmartCenter Server?

A. No. SmartCenter SIC will interfere with the function of SmartEvent.

B. No. If SmartCenter is already under stress, the use of a separate server for SmartEvent is recommended.

C. No, SmartEvent and Smartcenter cannot be installed on the same machine at the same time.

D. Yes. SmartEvent must be installed on your SmartCenter Server.

View Answer

Q7. What is the officially accepted diagnostic tool for IP Appliance Support?

A. ipsoinfo

B. CST

C. uag-diag

D. cpinfo

View Answer

Q8. Write the full fw command and syntax that you would use to troubleshoot ClusterXL sync issues. fw tab Answer:

-s -t connections

View Answer

Q9. When Dynamic Dispatcher is enabled, connections are assigned dynamically with the exception of

A. Threat Emulation

B. HTTPS

C. QOS

D. VolP

View Answer

Q10. Where can you find the Check Pointu2021s SNMP MIB file?

A. $CPDIR/lib/snmp/chkpt.mib

B. $FWDIR/conf/snmp.mib

C. It is obtained only by request from the TAC.

D. There is no specific MIB file for Check Point products.

View Answer

Q11. All R80 Security Servers can perform authentication with the exception of one. Which of the Security Servers can NOT perform authentication?

A. FTP

B. SMTP

C. HTTP

D. RLOGIN

View Answer

Q12. You have three servers located in a DMZ, using private IP addresses. You want internal users from 10.10.10.x to access the DMZ servers by public IP addresses. Internal_net 10.10.10.x is configured for Hide NAT behind the Security Gatewayu2021s external interface.

What is the best configuration for 10.10.10.x users to access the DMZ servers, using the DMZ serversu2021 public IP addresses?

A. When connecting to internal network 10.10.10.x, configure Hide NAT for the DMZ network behind the Security Gateway DMZ interface.

B. When the source is the internal network 10.10.10.x, configure manual static NAT rules to translate the DMZ servers.

C. When connecting to the Internet, configure manual Static NAT rules to translate the DMZ servers.

D. When trying to access DMZ servers, configure Hide NAT for 10.10.10.x behind the DMZu2021s interface.

View Answer

Q13. Review the Rule Base displayed.

For which rules will the connection templates be generated in SecureXL?

A. Rules 2 and 5

B. Rules 2 through 5

C. Rule 2 only

D. All rules except Rule 3

View Answer

Q14. MegaCorp is running Smartcenter R70, some Gateways at R65 and some other Gateways with R60. Management wants to upgrade to the most comprehensive IPv6 support. What should the administrator do first?

A. Upgrade Smartcenter to R80 first.

B. Upgrade R60-Gateways to R65.

C. Upgrade every unit directly to R80.

D. Check the ReleaseNotes to verify that every step is supported.

View Answer

Q15. Why would you not see a CoreXL configuration option in cpconfig?

A. The gateway only has one processor

B. CoreXL is not licenses

C. CoreXL is disabled via policy

D. CoreXL is not enabled in the gateway object

View Answer