NEW QUESTION 1
Which component functions as the Internal Certificate Authority for R77?

• A. Security Gateway
• B. Management Server
• C. Policy Server
• D. SmartLSM

Answer: B

NEW QUESTION 2
Two administrators Dave and Jon both manage R80 Management as administrators for ABC Corp. Jon logged into the R80 Management and then shortly after Dave logged in to the same server. They are both in the Security Policies view. From the screenshots below, why does Dave not have the rule no.6 in his SmartConsole view even though Jon has it his in his SmartConsole view?

• A. Jon is currently editing rule no.6 but has Published part of his changes.
• B. Dave is currently editing rule no.6 and has marked this rule for deletion.
• C. Dave is currently editing rule no.6 and has deleted it from his Rule Base.
• D. Jon is currently editing rule no.6 but has not yet Published his changes.

Answer: D

Explanation: When an administrator logs in to the Security Management Server through SmartConsole, a new editing session starts. The changes that the administrator makes during the session are only available to that administrator. Other administrators see a lock icon on object and rules that are being edited. To make changes available to all administrators, and to unlock the objects and rules that are being edited, the administrator must publish the session.

NEW QUESTION 3
In R80 Management, apart from using SmartConsole, objects or rules can also be modified using:

• A. 3rd Party integration of CLI and API for Gateways prior to R80.
• B. A complete CLI and API interface using SSH and custom CPCode integration.
• C. 3rd Party integration of CLI and API for Management prior to R80.
• D. A complete CLI and API interface for Management with 3rd Party integration.

Answer: B

NEW QUESTION 4
Fill in the blank: In order to install a license, it must first be added to the ______ .

• A. User Center
• B. Package repository
• C. Download Center Web site
• D. License and Contract repository

Answer: B

NEW QUESTION 5
Fill in the blank: To build an effective Security Policy, use a _____ and _____ rule.

• A. Cleanup; stealth
• B. Stealth; implicit
• C. Cleanup; default
• D. Implicit; explicit

Answer: A

NEW QUESTION 6
Sally has a Hot Fix Accumulator (HFA) she wants to install on her Security Gateway which operates with GAiA, but she cannot SCP the HFA to the system. She can SSH into the Security Gateway, but she has never been able to SCP files to it. What would be the most likely reason she cannot do so?

• A. She needs to edit /etc/SSHd/SSHd_config and add the Standard Mode account.
• B. She needs to run sysconfig and restart the SSH process.
• C. She needs to edit /etc/scpusers and add the Standard Mode account.
• D. She needs to run cpconfig to enable the ability to SCP files.

Answer: C

NEW QUESTION 7
You noticed that CPU cores on the Security Gateway are usually 100% utilized and many packets were dropped. You don’t have a budget to perform a hardware upgrade at this time. To optimize drops you decide to use Priority Queues and fully enable Dynamic Dispatcher. How can you enable them?

• A. fw ctl multik dynamic_dispatching on
• B. fw ctl multik dynamic_dispatching set_mode 9
• C. fw ctl multik set_mode 9
• D. fw ctl miltik pq enable

Answer: C

NEW QUESTION 8
When logging in for the first time to a Security management Server through SmartConsole, a fingerprint is saved to the:

• A. Security Management Server’s /home/.fgpt file and is available for future SmartConsole authentications.
• B. Windows registry is available for future Security Management Server authentications.
• C. there is no memory used for saving a fingerprint anyway.
• D. SmartConsole cache is available for future Security Management Server authentications.

Answer: D

NEW QUESTION 9
Which of the following is NOT an option to calculate the traffic direction?

• A. Incoming
• B. Internal
• C. External
• D. Outgoing

Answer: D

NEW QUESTION 10
Which policy type is used to enforce bandwidth and traffic control rules?

• A. Threat Emulation
• B. Access Control
• C. QoS
• D. Threat Prevention

Answer: C

Explanation: Check Point's QoS Solution
QoS is a policy-based QoS management solution from Check Point Software Technologies Ltd., satisfies your needs for a bandwidth management solution. QoS is a unique, software-only based application that manages traffic end-to-end across networks, by distributing enforcement throughout network hardware and software.

NEW QUESTION 11
When launching SmartDashboard, what information is required to log into R77?

• A. User Name, Management Server IP, certificate fingerprint file
• B. User Name, Password, Management Server IP
• C. Password, Management Server IP
• D. Password, Management Server IP, LDAP Server IP

Answer: B

NEW QUESTION 12
When configuring LDAP User Directory integration, Changes applied to a User Directory template are:

• A. Reflected immediately for all users who are using template.
• B. Not reflected for any users unless the local user template is changed.
• C. Reflected for all users who are using that template and if the local user template is changed as well.
• D. Not reflected for any users who are using that template.

Answer: A

Explanation: The users and user groups are arranged on the Account Unit in the tree structure of the LDAP server. User management in User Directory is external, not local. You can change the User Directory templates. Users
associated with this template get the changes immediately. You can change user definitions manually in SmartDashboard, and the changes are immediate on the server.

NEW QUESTION 13
Which of the following firewall modes DOES NOT allow for Identity Awareness to be deployed?

• A. Bridge
• B. Load Sharing
• C. High Availability
• D. Fail Open

Answer: A

NEW QUESTION 14
Harriet wants to protect sensitive information from intentional loss when users browse to a specific URL: https://personal.mymail.com, which blade will she enable to achieve her goal?

• A. DLP
• B. SSL Inspection
• C. Application Control
• D. URL Filtering

Answer: A

Explanation: Check Point revolutionizes DLP by combining technology and processes to move businesses from passive detection to active Data Loss Prevention. Innovative MultiSpect™ data classification combines user, content and process information to make accurate decisions, while UserCheck™ technology empowers users to remediate incidents in real time. Check Point’s self-educating network-based DLP solution frees IT/security personnel from incident handling and educates users on proper data handling policies—protecting sensitive corporate information from both intentional and unintentional loss.

NEW QUESTION 15
Which directory holds the SmartLog index files by default?

• A. $SMARTLOGDIR/data
• B. $SMARTLOG/dir
• C. $FWDIR/smartlog
• D. $FWDIR/log

Answer: A

NEW QUESTION 16
What are types of Check Point APIs available currently as part of R80.10 code?

• A. Security Gateway API, Management API, Threat Prevention API and Identity Awareness Web Services API
• B. Management API, Threat Prevention API, Identity Awareness Web Services API and OPSEC SDK API
• C. OSE API, OPSEC SDK API, Threat Prevention API and Policy Editor API
• D. CPMI API, Management API, Threat Prevention API and Identity Awareness Web Services API

Answer: B

NEW QUESTION 17
Where would an administrator enable Implied Rules logging?

• A. In Smart Log Rules View
• B. In SmartDashboard on each rule
• C. In Global Properties under Firewall
• D. In Global Properties under log and alert

Answer: B

NEW QUESTION 18
While in SmartView Tracker, Brady has noticed some very odd network traffic that he thinks could be an intrusion. He decides to block the traffic for 60 minutes, but cannot remember all the steps. What is the correct order of steps needed to set up the block?
1) Select Active Mode tab in SmartView Tracker.
2) Select Tools > Block Intruder.
3) Select Log Viewing tab in SmartView Tracker.
4) Set Blocking Timeout value to 60 minutes.
5) Highlight connection that should be blocked.

• A. 1, 2, 5, 4
• B. 3, 2, 5, 4
• C. 1, 5, 2, 4
• D. 3, 5, 2, 4

Answer: C

NEW QUESTION 19
What command would show the API server status?

• A. cpm status
• B. api restart
• C. api status
• D. show api status

Answer: D

NEW QUESTION 20
You have successfully backed up your Check Point configurations without the OS information. What command would you use to restore this backup?

• A. restore_backup
• B. import backup
• C. cp_merge
• D. migrate import

Answer: A