Question 1

In the Network policy layer, the default action for the Implied last rule is ________ all traffic. However, in the Application Control policy layer, the default action is ________ all traffic.

Accepted Answer

A)  Accept; redirect 
B)  Accept; drop 
C)  Redirect; drop 
D)  Drop; accept

Question 2

Which tool is used to enable ClusterXL?

Accepted Answer

A)  SmartUpdate 
B)  cpconfig 
C)  SmartConsole 
D)  sysconfig

Question 3

Which of the completed statements is NOT true? The WebUI can be used to manage Operating System user accounts and:

Accepted Answer

A)  assign privileges to users. 
B)  edit the home directory of the user. 
C)  add users to your Gaia system. 
D)  assign user rights to their home directory in the Security Management Server

Question 4

Which of the following is NOT an identity source used for Identity Awareness?

Accepted Answer

A)  Remote Access 
B)  UserCheck 
C)  AD Query 
D)  RADIUS

Question 5

Service blades must be attached to a ______________.

Accepted Answer

A)  Security Gateway 
B)  Management container 
C)  Management server 
D)  Security Gateway container

Question 6

John is the administrator of a R80 Security Management server managing r R77.30 Check Point Security Gateway. John is currently updating the network objects and amending the rules using SmartConsole. To make John's changes available to other administrators, and to save the database before installing a policy, what must John do?

Accepted Answer

A)  Logout of the session 
B)  File > Save 
C)  Install database 
D)  Publish the session

Question 7

Which two Identity Awareness commands are used to support identity sharing?

Accepted Answer

A)  Policy Decision Point (PDP) and Policy Enforcement Point (PEP) 
B)  Policy Enforcement Point (PEP) and Policy Manipulation Point (PMP) 
C)  Policy Manipulation Point (PMP) and Policy Activation Point (PAP) 
D)  Policy Activation Point (PAP) and Policy Decision Point (PDP)

Question 8

Two administrators Dave and Jon both manage R80 Management as administrators for Alpha Corp. Jon logged into the R80 Management and then shortly after Dave logged in to the same server. They are both in the Security Policies view. From the screenshots below, why does Dave not have the rule no.6 in his SmartConsole view even though Jon has it his in his SmartConsole view?

Accepted Answer

A)  Jon is currently editing rule no.6 but has Published part of his changes. 
B)  Dave is currently editing rule no.6 and has marked this rule for deletion. 
C)  Dave is currently editing rule no.6 and has deleted it from his Rule Base. 
D)  Jon is currently editing rule no.6 but has not yet Published his changes.

Question 9

In which scenario is it a valid option to transfer a license from one hardware device to another?

Accepted Answer

A)  From a 4400 Appliance to an HP Open Server 
B)  From an IBM Open Server to an HP Open Server 
C)  From an 4400 Appliance to a 2200 Appliance 
D)  From an IBM Open Server to a 2200 Appliance

Question 10

Packages and licenses are loaded from all of these sources EXCEPT

Accepted Answer

A)  Download Center Web site 
B)  UserUpdate 
C)  User Center 
D)  Check Point DVD

Question 11

Which of the following ClusterXL modes uses a non-unicast MAC address for the cluster IP address.

Accepted Answer

A)  High Availability 
B)  Load Sharing Multicast 
C)  Load Sharing Pivot 
D)  Master/Backup

Question 12

What are the advantages of a "shared policy" in R80?

Accepted Answer

A)  Allows the administrator to share a policy between all the users identified by the Security Gateway 
B)  Allows the administrator to share a policy between all the administrators managing the Security Management Server 
C)  Allows the administrator to share a policy so that it is available to use in another Policy Package 
D)  Allows the administrator to install a policy on one Security Gateway and it gets installed on another managed Security Gateway

Question 13

Where can I find the file for a Gaia backup named backup_fw on a Check Point Appliance?

Accepted Answer

A)  /var/log/CPbackup/backups/backup_fw.tgz 
B)  /var/CPbackup/backups/backup_fw.tgz 
C)  /var/log/backups/backup_fw.tgz 
D)  $CPDIR/backups/backup_fw.tgz

Question 14

Which Threat Prevention Software Blade provides comprehensive against malicious and unwanted network traffic, focusing on application and server vulnerabilities?

Accepted Answer

A)  Anti-Virus 
B)  IPS 
C)  Anti-Spam 
D)  Anti-bot

Question 15

Which of the following is NOT defined by an Access Role object?

Accepted Answer

A)  Source Network 
B)  Source Machine 
C)  Source User 
D)  Source Server

Question 16

________information is included in the "Full Log" tracking option, but is not included in the "Log" tracking option?

Accepted Answer

A)  File attributes 
B)  Application 
C)  Destination port 
D)  Data type

Question 17

Joey wants to configure NTP on R80 Security Management Server. He decided to do this via WebUI. What is the correct IP address and default port to access the Web UI for Gaia platform via browser?

Accepted Answer

A) https:// B) https://:443 C) https://:10000 D) https://:4434

Question 18

If there are two administrators logged in at the same time to the SmartConsole, and there are objects locked for editing, what must be done to make them available to other administrators? Choose the BEST answer.

Accepted Answer

A)  Publish or discard the session. 
B)  Revert the session. 
C)  Save and install the Policy. 
D)  Delete older versions of database.

Question 19

Vanessa is firewall administrator in her company; her company is using Check Point firewalls on central and remote locations, which are managed centrally by R80 Security Management Server. One central location has an installed R77.30 Gateway on Open server. Remote location is using Check Point UTM-1 570 series appliance with R71. Which encryption is used in Secure Internal Communication (SIC) between central management and firewall on each location?

Accepted Answer

A)  On central firewall AES128 encryption is used for SIC, on Remote firewall 3DES encryption is used for SIC. 
B)  On both firewalls, the same encryption is used for SIC. This is AES-GCM-256. 
C)  The Firewall Administrator can choose which encryption suite will be used by SIC. 
D)  On central firewall AES256 encryption is used for SIC, on Remote firewall AES128 encryption is used for SIC.

Question 20

The system administrator of a company is trying to find out why acceleration is not working for the traffic. The traffic is allowed according to the rule base and checked for viruses. But it is not accelerated. What is the most likely reason that the traffic is not accelerated?

Accepted Answer

A)  There is a virus found. Traffic is still allowed but not accelerated 
B)  The connection required a Security server 
C)  Acceleration is not enabled 
D)  The traffic is originating from the gateway itself

Exam 2: Check Point Certified Security Administrator (CCSA R80)

In the Network policy layer, the default action for the Implied last rule is all traffic. However, in the Application Control policy layer, the default action is all traffic.