Question 1

NAT can NOT be configured on which of the following objects?

Accepted Answer

A)  HTTP Logical Server 
B)  Gateway 
C)  Address Range 
D)  Host 
A)  HTTP Logical Server 
B)  Gateway 
C)  Address Range 
D)  Host

Question 2

Check Point APIs allow system engineers and developers to make changes to their organization's security policy with CLI tools and Web Services for all of the following except:

Accepted Answer

A)  Create new dashboards to manage 3 rd party task Create new dashboards to manage 3 rd party task 
B)  Create products that use and enhance 3 rd party solutions Create products that use and enhance 3 party solutions 
C)  Execute automated scripts to perform common tasks 
D)  Create products that use and enhance the Check Point Solution 
A)  Create new dashboards to manage 3 rd party task Create new dashboards to manage 3 rd party task 
B)  Create products that use and enhance 3 rd party solutions Create products that use and enhance 3 party solutions 
C)  Execute automated scripts to perform common tasks 
D)  Create products that use and enhance the Check Point Solution

Question 3

What is the purpose of a Stealth Rule?

Accepted Answer

A)  A rule used to hide a server's IP address from the outside world. 
B)  A rule that allows administrators to access SmartDashboard from any device. 
C)  To drop any traffic destined for the firewall that is not otherwise explicitly allowed. 
D)  A rule at the end of your policy to drop any traffic that is not explicitly allowed. 
A)  A rule used to hide a server's IP address from the outside world. 
B)  A rule that allows administrators to access SmartDashboard from any device. 
C)  To drop any traffic destined for the firewall that is not otherwise explicitly allowed. 
D)  A rule at the end of your policy to drop any traffic that is not explicitly allowed.

Question 4

CPU-level of your Security gateway is peaking to 100% causing problems with traffic. You suspect that the problem might be the Threat Prevention settings. The following Threat Prevention Profile has been created.   How could you tune the profile in order to lower the CPU load still maintaining security at good level? Select the BEST answer.

Accepted Answer

A)  Set High Confidence to Low and Low Confidence to Inactive. 
B)  Set the Performance Impact to Medium or lower. 
C)  The problem is not with the Threat Prevention Profile. Consider adding more memory to the appliance. 
D)  Set the Performance Impact to Very Low Confidence to Prevent. 
A)  Set High Confidence to Low and Low Confidence to Inactive. 
B)  Set the Performance Impact to Medium or lower. 
C)  The problem is not with the Threat Prevention Profile. Consider adding more memory to the appliance. 
D)  Set the Performance Impact to Very Low Confidence to Prevent.

Question 5

Of all the Check Point components in your network, which one changes most often and should be backed up most frequently?

Accepted Answer

A)  SmartManager 
B)  SmartConsole 
C)  Security Gateway 
D)  Security Management Server 
A)  SmartManager 
B)  SmartConsole 
C)  Security Gateway 
D)  Security Management Server

Question 6

ALPHA Corp has a new administrator who logs into the Gaia Portal to make some changes. He realizes that even though he has logged in as an administrator, he is unable to make any changes because all configuration options are greyed out as shown in the screenshot image below. What is the likely cause for this?

Accepted Answer

A)  The Gaia /bin/confd is locked by another administrator from a SmartConsole session. The Gaia /bin/confd is locked by another administrator from a SmartConsole session. 
B)  The database is locked by another administrator SSH session. 
C)  The Network address of his computer is in the blocked hosts. 
D)  The IP address of his computer is not in the allowed hosts. 
A)  The Gaia /bin/confd is locked by another administrator from a SmartConsole session. The Gaia /bin/confd is locked by another administrator from a SmartConsole session. 
B)  The database is locked by another administrator SSH session. 
C)  The Network address of his computer is in the blocked hosts. 
D)  The IP address of his computer is not in the allowed hosts.

Question 7

Study the Rule base and Client Authentication Action properties screen.     After being authenticated by the Security Gateways, a user starts a HTTP connection to a Web site. What happens when the user tries to FTP to another site using the command line? The:

Accepted Answer

A)  user is prompted for authentication by the Security Gateways again. 
B)  FTP data connection is dropped after the user is authenticated successfully. 
C)  user is prompted to authenticate from that FTP site only, and does not need to enter his username and password for Client Authentication 
D)  FTP connection is dropped by Rule 2. 
A)  user is prompted for authentication by the Security Gateways again. 
B)  FTP data connection is dropped after the user is authenticated successfully. 
C)  user is prompted to authenticate from that FTP site only, and does not need to enter his username and password for Client Authentication 
D)  FTP connection is dropped by Rule 2.

Question 8

Which software blade enables Access Control policies to accept, drop, or limit web site access based on user, group, and/or machine?

Accepted Answer

A)  Application Control 
B)  Data Awareness 
C)  Identity Awareness 
D)  Threat Emulation 
A)  Application Control 
B)  Data Awareness 
C)  Identity Awareness 
D)  Threat Emulation

Question 9

What is the potential downside or drawback to choosing the Standalone deployment option instead of the Distributed deployment option?

Accepted Answer

A)  degrades performance as the Security Policy grows in size 
B)  requires additional Check Point appliances 
C)  requires additional software subscription 
D)  increases cost 
A)  degrades performance as the Security Policy grows in size 
B)  requires additional Check Point appliances 
C)  requires additional software subscription 
D)  increases cost

Question 10

Access roles allow the firewall administrator to configure network access according to:

Accepted Answer

A)  a combination of computer groups and network 
B)  users and user groups 
C)  all of above 
D)  remote access clients 
A)  a combination of computer groups and network 
B)  users and user groups 
C)  all of above 
D)  remote access clients

Question 11

When doing a Stand-Alone Installation, you would install the Security Management Server with which other Check Point architecture component?

Accepted Answer

A)  None, Security Management Server would be installed by itself. 
B)  SmartConsole 
C)  SecureClient 
D)  SmartEvent 
A)  None, Security Management Server would be installed by itself. 
B)  SmartConsole 
C)  SecureClient 
D)  SmartEvent

Question 12

SandBlast offers flexibility in implementation based on their individual business needs. What is an option for deployment of Check Point SandBlast Zero-Day Protection?

Accepted Answer

A)  Smart Cloud Services 
B)  Load Sharing Mode Services 
C)  Threat Agent Solution 
D)  Public Cloud Services 
A)  Smart Cloud Services 
B)  Load Sharing Mode Services 
C)  Threat Agent Solution 
D)  Public Cloud Services

Question 13

If the first packet of an UDP session is rejected by a security policy, what does the firewall send to the client?

Accepted Answer

A)  Nothing 
B)  TCP FIN 
C)  TCP RST 
D)  ICMP unreachable 
A)  Nothing 
B)  TCP FIN 
C)  TCP RST 
D)  ICMP unreachable

Question 14

In what way is Secure Network Distributor (SND) a relevant feature of the Security Gateway?

Accepted Answer

A)  SND is a feature to accelerate multiple SSL VPN connections 
B)  SND is an alternative to IPSec Main Mode, using only 3 packets 
C)  SND is used to distribute packets among Firewall instances 
D)  SND is a feature of fw monitor to capture accelerated packets 
A)  SND is a feature to accelerate multiple SSL VPN connections 
B)  SND is an alternative to IPSec Main Mode, using only 3 packets 
C)  SND is used to distribute packets among Firewall instances 
D)  SND is a feature of fw monitor to capture accelerated packets

Question 15

Full synchronization between cluster members is handled by Firewall Kernel. Which port is used for this?

Accepted Answer

A)  UDP port 265 
B)  TCP port 265 
C)  UDP port 256 
D)  TCP port 256 
A)  UDP port 265 
B)  TCP port 265 
C)  UDP port 256 
D)  TCP port 256

Question 16

In which deployment is the security management server and Security Gateway installed on the same appliance?

Accepted Answer

A)  Bridge Mode 
B)  Remote 
C)  Standalone 
D)  Distributed 
A)  Bridge Mode 
B)  Remote 
C)  Standalone 
D)  Distributed

Question 17

Which feature in R77 permits blocking specific IP addresses for a specified time period?

Accepted Answer

A)  Suspicious Activity Monitoring 
B)  HTTP Methods 
C)  Local Interface Spoofing 
D)  Block Port Overflow 
A)  Suspicious Activity Monitoring 
B)  HTTP Methods 
C)  Local Interface Spoofing 
D)  Block Port Overflow

Question 18

Where do you verify that UserDirectory is enabled?

Accepted Answer

A)  Verify that Security Gateway > General Properties > Authentication > Use UserDirectory (LDAP) for Security Gateways is checked Verify that Security Gateway > General Properties > Authentication > Use UserDirectory (LDAP) for Security Gateways is checked 
B)  Verify that Global Properties > Authentication > Use UserDirectory (LDAP) for Security Gateways is checked. Global Properties > Authentication > Use UserDirectory (LDAP) for Security Gateways is checked. 
C)  Verify that Security Gateway > General Properties > UserDirectory (LDAP) > Use UserDirectory (LDAP) for Security Gateways is checked. Security Gateway > General Properties > UserDirectory (LDAP) > Use UserDirectory (LDAP) for Security Gateways is checked. 
D)  Verify that Global Properties > UserDirectory (LDAP) > Use UserDirectory (LDAP) for Security Gateways is checked. Global Properties > UserDirectory (LDAP) > Use UserDirectory (LDAP) for Security Gateways 
A)  Verify that Security Gateway > General Properties > Authentication > Use UserDirectory (LDAP) for Security Gateways is checked Verify that Security Gateway > General Properties > Authentication > Use UserDirectory (LDAP) for Security Gateways is checked 
B)  Verify that Global Properties > Authentication > Use UserDirectory (LDAP) for Security Gateways is checked. Global Properties > Authentication > Use UserDirectory (LDAP) for Security Gateways is checked. 
C)  Verify that Security Gateway > General Properties > UserDirectory (LDAP) > Use UserDirectory (LDAP) for Security Gateways is checked. Security Gateway > General Properties > UserDirectory (LDAP) > Use UserDirectory (LDAP) for Security Gateways is checked. 
D)  Verify that Global Properties > UserDirectory (LDAP) > Use UserDirectory (LDAP) for Security Gateways is checked. Global Properties > UserDirectory (LDAP) > Use UserDirectory (LDAP) for Security Gateways

Question 19

What are the three types of UserCheck messages?

Accepted Answer

A)  inform, ask, and block 
B)  block, action, and warn 
C)  action, inform, and ask 
D)  ask, block, and notify 
A)  inform, ask, and block 
B)  block, action, and warn 
C)  action, inform, and ask 
D)  ask, block, and notify

Question 20

Which rule is responsible for the user authentication failure?

Accepted Answer

A)  Rule 4 
B)  Rule 6 
C)  Rule 3 
D)  Rule 5 
A)  Rule 4 
B)  Rule 6 
C)  Rule 3 
D)  Rule 5

NAT can NOT be configured on which of the following objects?

Check Point APIs allow system engineers and developers to make changes to their organization's security policy with CLI tools and Web Services for all of the following except:

What is the purpose of a Stealth Rule?

Of all the Check Point components in your network, which one changes most often and should be backed up most frequently?

Study the Rule base and Client Authentication Action properties screen. After being authenticated by the Security Gateways, a user starts a HTTP connection to a Web site. What happens when the user tries to FTP to another site using the command line? The:

Which software blade enables Access Control policies to accept, drop, or limit web site access based on user, group, and/or machine?

What is the potential downside or drawback to choosing the Standalone deployment option instead of the Distributed deployment option?

Access roles allow the firewall administrator to configure network access according to:

When doing a Stand-Alone Installation, you would install the Security Management Server with which other Check Point architecture component?

SandBlast offers flexibility in implementation based on their individual business needs. What is an option for deployment of Check Point SandBlast Zero-Day Protection?

If the first packet of an UDP session is rejected by a security policy, what does the firewall send to the client?

In what way is Secure Network Distributor (SND) a relevant feature of the Security Gateway?

Full synchronization between cluster members is handled by Firewall Kernel. Which port is used for this?

In which deployment is the security management server and Security Gateway installed on the same appliance?

Which feature in R77 permits blocking specific IP addresses for a specified time period?

Where do you verify that UserDirectory is enabled?

What are the three types of UserCheck messages?

Which rule is responsible for the user authentication failure?

Check Point Certified Security Principles Associate (CCSPA)

Check Point Certified Security Expert - R80

Filters

Exam 2: Check Point Certified Security Administrator (CCSA R80)

NAT can NOT be configured on which of the following objects?

Check Point APIs allow system engineers and developers to make changes to their organization's security policy with CLI tools and Web Services for all of the following except:

What is the purpose of a Stealth Rule?

Of all the Check Point components in your network, which one changes most often and should be backed up most frequently?

Study the Rule base and Client Authentication Action properties screen. After being authenticated by the Security Gateways, a user starts a HTTP connection to a Web site. What happens when the user tries to FTP to another site using the command line? The:

Which software blade enables Access Control policies to accept, drop, or limit web site access based on user, group, and/or machine?

What is the potential downside or drawback to choosing the Standalone deployment option instead of the Distributed deployment option?

Access roles allow the firewall administrator to configure network access according to:

When doing a Stand-Alone Installation, you would install the Security Management Server with which other Check Point architecture component?

SandBlast offers flexibility in implementation based on their individual business needs. What is an option for deployment of Check Point SandBlast Zero-Day Protection?

If the first packet of an UDP session is rejected by a security policy, what does the firewall send to the client?

In what way is Secure Network Distributor (SND) a relevant feature of the Security Gateway?

Full synchronization between cluster members is handled by Firewall Kernel. Which port is used for this?

In which deployment is the security management server and Security Gateway installed on the same appliance?

Which feature in R77 permits blocking specific IP addresses for a specified time period?

Where do you verify that UserDirectory is enabled?

What are the three types of UserCheck messages?

Which rule is responsible for the user authentication failure?

Check Point Certified Security Principles Associate (CCSPA)

Check Point Certified Security Expert - R80

Filters