Question No: 7

SmartEvent does NOT use which of the following procedures to identify events?

A. Matching a log against each event definition

B. Create an event candidate

C. Matching a log against local exclusions

D. Matching a log against global exclusions

View Answer

Question No: 8

Which file gives you a list of all security servers in use, including port number?

A. $FWDIR/conf/conf.conf

B. $FWDIR/conf/servers.conf

C. $FWDIR/conf/fwauthd.conf

D. $FWDIR/conf/serversd.conf

View Answer

Question No: 9

You are running a R80 Security Gateway on GAiA. In case of a hardware failure, you have a server with the exact same hardware and firewall version installed. What back up method could be used to quickly put the secondary firewall into production?

A. manual backup

B. upgrade_export

C. backup

D. snapshot

View Answer

Question No: 10

Which three of the following are ClusterXL member requirements?

1) same operating systems

2) same Check Point version

3) same appliance model

4) same policy

A. 1, 3, and 4

B. 1, 2, and 4

C. 2, 3, and 4

D. 1, 2, and 3

View Answer

Question No: 11

Where does the security administrator activate Identity Awareness within SmartDashboard?

A. Gateway Object > General Properties

B. Security Management Server > Identity Awareness

C. Policy > Global Properties > Identity Awareness

D. LDAP Server Object > General Properties

View Answer

Question No: 12

Which directory below contains log files?

A. /opt/CPSmartlog-R80/log

B. /opt/CPshrd-R80/log

C. /opt/CPsuite-R80/fw1/log

D. /opt/CPsuite-R80/log

View Answer

Question No: 13

Looking at the SYN packets in the Wireshark output, select the statement that is true about NAT.

A. This is an example of Hide NAT.

B. There is not enough information provided in the Wireshark capture to determine the NAT settings.

C. This is an example of Static NAT and Translate destination on client side unchecked in Global Properties.

D. This is an example of Static NAT and Translate destination on client side checked in Global Properties.

View Answer

Question No: 14

Use the table to match the BEST Management High Availability synchronication-status descriptions for your Security Management Server (SMS).

Exhibit:

A. A-5, B-3, C-1, D-2

B. A-3, B-1, C-4, D-2

C. A-3, B-5, C-2, D-4

D. A-3, B-1, C-5, D-4

View Answer

Question No: 15

You find that Users are not prompted for authentication when they access their Web servers, even though you have created an HTTP rule via User Authentication. Choose the BEST reason why.

A. You checked the cache password on desktop option in Global Properties.

B. Another rule that accepts HTTP without authentication exists in the Rule Base.

C. You have forgotten to place the User Authentication Rule before the Stealth Rule.

D. Users must use the SecuRemote Client, to use the User Authentication Rule.

View Answer

Question No: 16

Your company is running Security Management Server R80 on GAiA, which has been migrated through each version starting from Check Point 4.1. How do you add a new administrator account?

A. Using SmartDashboard, under Users, select Add New Administrator

B. Using SmartDashboard or cpconfig

C. Using the Web console on GAiA under Product configuration, select Administrators

D. Using cpconfig on the Security Management Server, choose Administrators

View Answer