NEW QUESTION 1
If there are two administration logged in at the same time to the SmartConsole, and there are objects locked for editing, what must be done to make them available or other administrators? (Choose the BEST answer.)

• A. Publish or discard the session.
• B. Revert the session.
• C. Save and install the Policy.
• D. Delete older versions of database.

Answer: A

NEW QUESTION 2
What is the recommended configuration when the customer requires SmartLog indexing for 14 days and SmartEvent to keep events for 180 days?

• A. Use Multi-Domain Management Server.
• B. Choose different setting for log storage and SmartEvent db
• C. Install Management and SmartEvent on different machines.
• D. it is not possible.

Answer: B

NEW QUESTION 3
DLP and Geo Policy are examples of what type of Policy?

• A. Standard Policies
• B. Shared Policies
• C. Inspection Policies
• D. Unified Policies

Answer: B

NEW QUESTION 4
What is UserCheck?

• A. Messaging tool used to verify a user’s credentials.
• B. Communication tool used to inform a user about a website or application they are trying to access.
• C. Administrator tool used to monitor users on their network.
• D. Communication tool used to notify an administrator when a new user is created.

Answer: B

NEW QUESTION 5
Which Check Point software blade provides Application Security and identity control?

• A. Identity Awareness
• B. Data Loss Prevention
• C. URL Filtering
• D. Application Control

Answer: D

NEW QUESTION 6
Which application should you use to install a contract file?

• A. SmartView Monitor
• B. WebUI
• C. SmartUpdate
• D. SmartProvisioning

Answer: C

NEW QUESTION 7
Which command lists all tables in Gaia?

• A. fw tab –t
• B. fw tab –list
• C. fw-tab –s
• D. fw tab -1

Answer: C

NEW QUESTION 8
You find one of your cluster gateways showing “Down” when you run the “cphaprob stat” command. You then run the “clusterXL_admin up” on the down member but unfortunately the member continues to show down. What command do you run to determine the cause?

• A. cphaprob –f register
• B. cphaprob –d –s report
• C. cpstat –f all
• D. cphaprob –a list

Answer: D

NEW QUESTION 9
You have a Geo-Protection policy blocking Australia and a number of other countries. Your network now requires a Check Point Firewall to be installed in Sydney, Australia.
What must you do to get SIC to work?

• A. Remove Geo-Protection, as the IP-to-country database is updated externally, and you have no control of this.
• B. Create a rule at the top in the Sydney firewall to allow control traffic from your network
• C. Nothing - Check Point control connections function regardless of Geo-Protection policy
• D. Create a rule at the top in your Check Point firewall to bypass the Geo-Protection

Answer: C

NEW QUESTION 10
The Check Point history feature in R80 provides the following:

• A. View install changes and install specific version
• B. View install changes
• C. Policy Installation Date, view install changes and install specific version
• D. Policy Installation Date only

Answer: C

NEW QUESTION 11
What are the attributes that SecureXL will check after the connection is allowed by Security Policy?

• A. Source address, Destination address, Source port, Destination port, Protocol
• B. Source MAC address, Destination MAC address, Source port, Destination port, Protocol
• C. Source address, Destination address, Source port, Destination port
• D. Source address, Destination address, Destination port, Protocol

Answer: A

NEW QUESTION 12
Which of the following statements is TRUE about R80 management plug-ins?

• A. The plug-in is a package installed on the Security Gateway.
• B. Installing a management plug-in requires a Snapshot, just like any upgrade process.
• C. A management plug-in interacts with a Security Management Server to provide new features and support for new products.
• D. Using a plug-in offers full central management only if special licensing is applied to specific features of the plug-in.

Answer: C

NEW QUESTION 13
Pamela is Cyber Security Engineer working for Global Instance Firm with large scale deployment of Check Point Enterprise Appliances using GAiA/R80.10. Company’s Developer Team is having random access issue to newly deployed Application Server in DMZ’s Application Server Farm Tier and blames DMZ Security Gateway as root cause. The ticket has been created and issue is at Pamela’s desk for an investigation. Pamela decides to use Check Point’s Packet Analyzer Tool-fw monitor to iron out the issue during approved Maintenance window.
What do you recommend as the best suggestion for Pamela to make sure she successfully captures entire traffic in context of Firewall and problematic traffic?

• A. Pamela should check SecureXL status on DMZ Security gateway and if it’s turned O
• B. She should turn OFF SecureXL before using fw monitor to avoid misleading traffic captures.
• C. Pamela should check SecureXL status on DMZ Security Gateway and if it’s turned OF
• D. She should turn ON SecureXL before using fw monitor to avoid misleading traffic captures.
• E. Pamela should use tcpdump over fw monitor tool as tcpdump works at OS-level and captures entire traffic.
• F. Pamela should use snoop over fw monitor tool as snoop works at NIC driver level and captures entire traffic.

Answer: A

NEW QUESTION 14
How do Capsule Connect and Capsule Workspace differ?

• A. Capsule Connect provides a Layer3 VP
• B. Capsule Workspace provides a Desktop with usable applications.
• C. Capsule Workspace can provide access to any application.
• D. Capsule Connect provides Business data isolation.
• E. Capsule Connect does not require an installed application at client.

Answer: A

NEW QUESTION 15
What will SmartEvent automatically define as events?

• A. Firewall
• B. VPN
• C. IPS
• D. HTTPS

Answer: C

NEW QUESTION 16
When users connect to the Mobile Access portal they are unable to open File Shares. Which log file would you want to examine?

• A. cvpnd.elg
• B. httpd.elg
• C. vpnd.elg
• D. fw.elg

Answer: A

NEW QUESTION 17
What has to be taken into consideration when configuring Management HA?

• A. The Database revisions will not be synchronized between the management servers
• B. SmartConsole must be closed prior to synchronized changes in the objects database
• C. If you wanted to use Full Connectivity Upgrade, you must change the Implied Rules to allow FW1_cpredundant to pass before the Firewall Control Connections.
• D. For Management Server synchronization, only External Virtual Switches are supporte
• E. So, if you wanted to employ Virtual Routers instead, you have to reconsider your design.

Answer: A

NEW QUESTION 18
......