NEW QUESTION 1
What are the three essential components of the Check Point Security Management Architecture?

• A. SmartConsole, Security Management Server, Security Gateway
• B. SmartConsole, SmartUpdate, Security Gateway
• C. Security Management Server, Security Gateway, Command Line Interface
• D. WebUI, SmartConsole, Security Gateway

Answer: A

Explanation: Standalone deployment - Security Gateway and the Security Management server are installed on the same machine.
Distributed deployment - Security Gateway and the Security Management server are installed on different machines.
Deployments
Basic deployments:

Assume an environment with gateways on different sites. Each Security Gateway connects to the Internet on one side, and to a LAN on the other.
You can create a Virtual Private Network (VPN) between the two Security Gateways, to secure all communication between them.
The Security Management server is installed in the LAN, and is protected by a Security Gateway. The Security Management server manages the Security Gateways and lets remote users connect securely to the corporate network. SmartDashboard can be installed on the Security Management server or another computer.
There can be other OPSEC-partner modules (for example, an Anti-Virus Server) to complete the network security with the Security Management server and its Security Gateways.

NEW QUESTION 2
What is the potential downside or drawback to choosing the Standalone deployment option instead of the Distributed deployment option?

• A. degrades performance as the Security Policy grows in size
• B. requires additional Check Point appliances
• C. requires additional software subscription
• D. increases cost

Answer: A

NEW QUESTION 3
You are the administrator for ABC Corp. You have logged into your R80 Management server. You are making some changes in the Rule Base and notice that rule No.6 has a pencil icon next to it.

What does this mean?

• A. The rule No.6 has been marked for deletion in your Management session.
• B. The rule No.6 has been marked for deletion in another Management session.
• C. The rule No.6 has been marked for editing in your Management session.
• D. The rule No.6 has been marked for editing in another Management session.

Answer: C

NEW QUESTION 4
ABC Corp., and have recently returned from a training course on Check Point's new advanced R80 management platform. You are presenting an in-house R80 Management to the other administrators in ABC Corp.

How will you describe the new “Publish” button in R80 Management Console?

• A. The Publish button takes any changes an administrator has made in their management session, publishes a copy to the Check Point of R80, and then saves it to the R80 database.
• B. The Publish button takes any changes an administrator has made in their management session and publishes a copy to the Check Point Cloud of R80 and but does not save it to the R80
• C. The Publish button makes any changes an administrator has made in their management session visible to all other administrator sessions and saves it to the Database.
• D. The Publish button makes any changes an administrator has made in their management session visible to the new Unified Policy session and saves it to the Database.

Answer: C

Explanation: To make your changes available to other administrators, and to save the database before installing a policy, you must publish the session. When you publish a session, a new database version is created.

NEW QUESTION 5
Which of the following is NOT a method used by Identity Awareness for acquiring identity?

• A. RADIUS
• B. Active Directory Query
• C. Remote Access
• D. Certificates

Answer: D

NEW QUESTION 6
Where does the security administrator activate Identity Awareness within SmartDashboard?

• A. Gateway Object > General Properties
• B. Security Management Server > Identity Awareness
• C. Policy > Global Properties > Identity Awareness
• D. LDAP Server Object > General Properties

Answer: A

NEW QUESTION 7
When installing a dedicated R80 SmartEvent server, what is the recommended size of the root partition?

• A. Any size
• B. Less than 20GB
• C. More than 10GB and less than 20 GB
• D. At least 20GB

Answer: D

NEW QUESTION 8
According to Check Point Best Practice, when adding a 3rd party gateway to a Check Point security solution what object SHOULD be added? A(n):

• A. Interoperable Device
• B. Network Node
• C. Externally managed gateway
• D. Gateway

Answer: A

NEW QUESTION 9
When doing a Stand-Alone Installation, you would install the Security Management Server with which other Check Point architecture component?

• A. None, Security Management Server would be installed by itself.
• B. SmartConsole
• C. SecureClient
• D. SmartEvent

Answer: D

Explanation: There are different deployment scenarios for Check Point software products.
Standalone Deployment - The Security Management Server and the Security Gateway are installed on the same computer or appliance.

NEW QUESTION 10
Which of the following is NOT an attribute of packer acceleration?

• A. Source address
• B. Protocol
• C. Destination port
• D. Application Awareness

Answer: D

NEW QUESTION 11
The Firewall kernel is replicated multiple times, therefore:

• A. The Firewall kernel only touches the packet if the connection is accelerated
• B. The Firewall can run different policies per core
• C. The Firewall kernel is replicated only with new connections and deletes itself once the connection times out
• D. The Firewall can run the same policy on all cores

Answer: D

NEW QUESTION 12
Which of the following is NOT a valid deployment option for R80?

• A. All-in-one (stand-alone)
• B. Log Server
• C. SmartEvent
• D. Multi-domain management server

Answer: D

NEW QUESTION 13
Tom has been tasked to install Check Point R80 in a distributed deployment. Before Tom installs the systems this way, how many machines will he need if he does NOT include a SmartConsole machine in his calculations?

• A. One machine, but it needs to be installed using SecurePlatform for compatibility purposes.
• B. One machine
• C. Two machines
• D. Three machines

Answer: C

Explanation: One for Security Management Server and the other one for the Security Gateway.

NEW QUESTION 14
You are unable to login to SmartDashboard. You log into the management server and run #cpwd_admin list with the following output:

What reason could possibly BEST explain why you are unable to connect to SmartDashboard?

• A. CDP is down
• B. SVR is down
• C. FWM is down
• D. CPSM is down

Answer: C

Explanation: The correct answer would be FWM (is the process making available communication between SmartConsole applications and Security Management Server.). STATE is T (Terminate = Down)
Symptoms
SmartDashboard fails to connect to the Security Management server.
Verify if the FWM process is running. To do this, run the command:
[Expert@HostName:0]# ps -aux | grep fwm
If the FWM process is not running, then try force-starting the process with the following command: [Expert@HostName:0]# cpwd_admin start -name FWM -path "$FWDIR/bin/fwm" -command "fwm" [Expert@HostName:0]# ps -aux | grep fwm
[Expert@HostName:0]# cpwd_admin start -name FWM -path "$FWDIR/bin/fwm" -command "fwm"

NEW QUESTION 15
You are about to test some rule and object changes suggested in an R77 news group. Which backup solution should you use to ensure the easiest restoration of your Security Policy to its previous configuration after testing the changes?

• A. Manual copies of the directory $FWDIR/conf
• B. upgrade_export command
• C. Database Revision Control
• D. GAiA backup utilities

Answer: C

NEW QUESTION 16
Which authentication scheme requires a user to possess a token?

• A. TACACS
• B. SecurID
• C. Check Point password
• D. RADIUS

Answer: B

Explanation: SecurID
SecurID requires users to both possess a token authenticator and to supply a PIN or password References:

NEW QUESTION 17
A client has created a new Gateway object that will be managed at a remote location. When the client attempts to install the Security Policy to the new Gateway object, the object does not appear in the Install On check box. What should you look for?

• A. Secure Internal Communications (SIC) not configured for the object.
• B. A Gateway object created using the Check Point > Externally Managed VPN Gateway option from the Network Objects dialog box.
• C. Anti-spoofing not configured on the interfaces on the Gateway object.
• D. A Gateway object created using the Check Point > Secure Gateway option in the network objects, dialog box, but still needs to configure the interfaces for the Security Gateway object.

Answer: B

NEW QUESTION 18
Fill in the blanks: A Check Point software license consists of a _____ and ______.

• A. Software container; software package
• B. Software blade; software container
• C. Software package; signature
• D. Signature; software blade

Answer: B

Explanation: Check Point's licensing is designed to be scalable and modular. To this end, Check Point offers both predefined packages as well as the ability to custom build a solution tailored to the needs of the Network Administrator. This is accomplished by the use of the following license components:
Software Blades
Container

NEW QUESTION 19
While enabling the Identity Awareness blade the Identity Awareness wizard does not automatically detect the windows domain. Why does it not detect the windows domain?

• A. Security Gateways is not part of the Domain
• B. SmartConsole machine is not part of the domain
• C. SMS is not part of the domain
• D. Identity Awareness is not enabled on Global properties

Answer: B

Explanation: To enable Identity Awareness:
Log in to SmartDashboard.
From the Network Objects tree, expand the Check Poinbtranch.
Double-click the Security Gateway on which to enable Identity Awareness.
In the Software Blades section, select Identity Awarenesosn the Network Security tab. The Identity Awareness Configuration wizard opens.
Select one or more options. These options set the methods for acquiring identities of managed and unmanaged assets.
AD Query - Lets the Security Gateway seamlessly identify Active Directory users and computers.
Browser-Based Authentication - Sends users to a Web page to acquire identities from unidentified users. If Transparent Kerberos Authentication is configured, AD users may be identified transparently.
Terminal Servers - Identify users in a Terminal Server environment (originating from one IP address).
See Choosing Identity Sources.
Note - When you enable Browser-Based Authentication on a Security Gateway that is on an IP Series appliance, make sure to set the Voyager management application port to a port other than 443 or 80.
Click Next.
The Integration With Active Directory window opens.
When SmartDashboard is part of the domain, SmartDashboard suggests this domain automatically. If you select this domain, the system creates an LDAP Account Unit with alolf the domain controllers in the organization's Active Directory.

NEW QUESTION 20
What action can be performed from SmartUpdate R77?

• A. upgrade_export
• B. fw stat -1
• C. cpinfo
• D. remote_uninstall_verifier

Answer: C