NEW QUESTION 1
Sticky Decision Function (SDF) is required to prevent which of the following? Assume you set up an Active-Active cluster.

• A. Symmetric routing
• B. Failovers
• C. Asymmetric routing
• D. Anti-Spoofing

Answer: B

NEW QUESTION 2
Session unique identifiers are passed to the web api using which http header option?

• A. X-chkp-sid
• B. Accept-Charset
• C. Proxy-Authorization
• D. Application

Answer: C

NEW QUESTION 3
Which VPN routing option uses VPN routing for every connection a satellite gateway handles?

• A. To satellites through center only
• B. To center only
• C. To center and to other satellites through center
• D. To center, or through the center to other satellites, to internet and other VPN targets

Answer: D

Explanation: On the VPN Routing page, enable the VPN routing for satellites section, by selecting one of these options:
To center and to other Satellites through center; this allows connectivity between Gateways; for example, if the spoke Gateways are DAIP Gateways, and the hub is a Gateway with a static IP address
To center, or through the center to other satellites, to Internet and other VPN targets; this allows connectivity between the Gateways, as well as the ability to inspect all communication passing through the hub to the Internet.

NEW QUESTION 4
Fill in the blank: The tool ____ generates a R80 Security Gateway configuration report.

• A. infoCP
• B. infoview
• C. cpinfo
• D. fw cpinfo

Answer: C

Explanation: CPInfo is an auto-updatable utility that collects diagnostics data on a customer's machine at the time of execution and uploads it to Check Point servers (it replaces the standalone cp_uploader utility for uploading files to Check Point servers).
The CPinfo output file allows analyzing customer setups from a remote location. Check Point support engineers can open the CPinfo file in a demo mode, while viewing actual customer Security Policies and Objects. This allows the in-depth analysis of customer's configuration and environment settings.
When contacting Check Point Support, collect the cpinfo files from the Security Management server and Security Gateways involved in your case.

NEW QUESTION 5
How many sessions can be opened on the Management Server at the same time?

• A. Unlimited, One per each licensed Gateway
• B. One
• C. Unlimited, Multiple per administrator
• D. Unlimited, One per administrator

Answer: D

NEW QUESTION 6
Which of the following statements is TRUE about R80 management plug-ins?

• A. The plug-in is a package installed on the Security Gateway.
• B. Installing a management plug-in requires a Snapshot, just like any upgrade process.
• C. A management plug-in interacts with a Security Management Server to provide new features and support for new products.
• D. Using a plug-in offers full central management only if special licensing is applied to specific features of the plug-in.

Answer: C

NEW QUESTION 7
What happens when you run the command: fw sam -J src [Source IP Address]?

• A. Connections from the specified source are blocked without the need to change the Security Policy.
• B. Connections to the specified target are blocked without the need to change the Security Policy.
• C. Connections to and from the specified target are blocked without the need to change the Security Policy.
• D. Connections to and from the specified target are blocked with the need to change the Security Policy.

Answer: A

NEW QUESTION 8
The following graphic shows:

• A. View from SmartLog for logs initiated from source address 10.1.1.202
• B. View from SmartView Tracker for logs of destination address 10.1.1.202
• C. View from SmartView Tracker for logs initiated from source address 10.1.1.202
• D. View from SmartView Monitor for logs initiated from source address 10.1.1.202

Answer: C

NEW QUESTION 9
In the Check Point Security Management Architecture, which component(s) can store logs?

• A. SmartConsole
• B. Security Management Server and Security Gateway
• C. Security Management Server
• D. SmartConsole and Security Management Server

Answer: B

NEW QUESTION 10
You want to establish a VPN, using certificates. Your VPN will exchange certificates with an external partner. Which of the following activities sh you do first?

• A. Create a new logical-server object to represent your partner's CA
• B. Exchange exported CA keys and use them to create a new server object to represent your partner's Certificate Authority (CA)
• C. Manually import your partner's Certificate Revocation List.
• D. Manually import your partner's Access Control List.

Answer: B

NEW QUESTION 11
What are the three tabs available in SmartView Tracker?

• A. Network & Endpoint, Management, and Active
• B. Network, Endpoint, and Active
• C. Predefined, All Records, Custom Queries
• D. Endpoint, Active, and Custom Queries

Answer: C

NEW QUESTION 12
When a packet arrives at the gateway, the gateway checks it against the rules in the top Policy Layer, sequentially from top to bottom, and enforces the first rule that matches a packet. Which of the following statements about the order of rule enforcement is true?

• A. If the Action is Accept, the gateway allows the packet to pass through the gateway.
• B. If the Action is Drop, the gateway continues to check rules in the next Policy Layer down.
• C. If the Action is Accept, the gateway continues to check rules in the next Policy Layer down.
• D. If the Action is Drop, the gateway applies the Implicit Clean-up Rule for that Policy Layer.

Answer: C

NEW QUESTION 13
From SecureXL perspective, what are the tree paths of traffic flow:

• A. Initial Path; Medium Path; Accelerated Path
• B. Layer Path; Blade Path; Rule Path
• C. Firewall Path; Accept Path; Drop Path
• D. Firewall Path; Accelerated Path; Medium Path

Answer: D

NEW QUESTION 14
In order to modify Security Policies the administrator can use which of the following tools? Select the BEST answer.

• A. Command line of the Security Management Server or mgmt_cli.exe on any Windows computer.
• B. SmartConsole and WebUI on the Security Management Server.
• C. mgmt_cli or WebUI on Security Gateway and SmartConsole on the Security Management Server.
• D. SmartConsole or mgmt_cli on any computer where SmartConsole is installed.

Answer: D

NEW QUESTION 15
Fill in the blanks: A _____ license requires an administrator to designate a gateway for attachment whereas a _____ license is automatically attached to a Security Gateway.

• A. Format; corporate
• B. Local; formal
• C. Local; central
• D. Central; local

Answer: D

NEW QUESTION 16
Fill in the blank: The command _____ provides the most complete restoration of a R80 configuration.

• A. upgrade_import
• B. cpconfig
• C. fwm dbimport -p <export file>
• D. cpinfo -recover

Answer: A

Explanation: (Should be "migrate import")
"migrate import" Restores backed up configuration for R80 version, in previous versions the command was " upgrade_import ".

NEW QUESTION 17
Which utility allows you to configure the DHCP service on GAIA from the command line?

• A. ifconfig
• B. dhcp_cfg
• C. sysconfig
• D. cpconfig

Answer: C

Explanation: Sysconfig Configuration Options

NEW QUESTION 18
What is the difference between an event and a log?

• A. Events are generated at gateway according to Event Policy
• B. A log entry becomes an event when it matches any rule defined in Event Policy
• C. Events are collected with SmartWorkflow from Trouble Ticket systems
• D. Logs and Events are synonyms

Answer: B

NEW QUESTION 19
What SmartEvent component creates events?

• A. Consolidation Policy
• B. Correlation Unit
• C. SmartEvent Policy
• D. SmartEvent GUI

Answer: B

NEW QUESTION 20
When using Monitored circuit VRRP, what is a priority delta?

• A. When an interface fails the priority changes to the priority delta
• B. When an interface fails the delta claims the priority
• C. When an interface fails the priority delta is subtracted from the priority
• D. When an interface fails the priority delta decides if the other interfaces takes over

Answer: C