EMT Practice Test

1. Question Content...

---

Question1: Office mode means that:

Question2: Fill in the blank: A(n) _____ rule is created by an administrator and is located before the first and before last rules in the Rule Base.

Question3: Which type of Check Point license is tied to the IP address of a specific Security Gateway and cannot be transferred to a gateway that has a different IP address?

Question4: The following graphic shows:

Question5: Which of the following is NOT an advantage to using multiple LDAP servers?

Question6: Ken wants to obtain a configuration lock from other administrator on R80 Security Management Server. He can do this via WebUI or a via CLI. Which command should be use in CLI? Choose the correct answer.

Question7: What is the default shell of Gaia CLI?

Question8: When using GAiA, it might be necessary to temporarily change the MAC address of the interface eth 0to
00:0C:29:12:34:56. After restarting the network the old MAC address should be active. How do you configure this change?

Question9: Fill in the blank: Each cluster has __________ interfaces.

Question10: What will be the effect of running the following command on the Security Management Server?

Question11: You want to reset SIC between smberlin and sgosaka.

In SmartDashboard, you choose sgosaka, Communication, Reset. On sgosaka, you start cpconfig, choose Secure Internal Communication and enter the new SIC Activation Key. The screen reads The SIC was successfully initialized and jumps back to the menu. When trying to establish a connection, instead of a working connection, you receive this error message:

What is the reason for this behavior?

Question12: Fill in the blanks: A High Availability deployment is referred to as a ______ cluster and a Load Sharing deployment is referred to as a ________ cluster.

Question13: Fill in the blank: The _________ collects logs and sends them to the _________ .

Question14: Administrator wishes to update IPS from SmartConsole by clicking on the option "update now" under the IPS tab. Which device requires internet access for the update to work?

Question15: Jennifer McHanry is CEO of ACME. She recently bought her own personal iPad. She wants use her iPad to access the internal Finance Web server. Because the iPad is not a member of the Active Directory domain, she cannot identify seamlessly with AD Query. However, she can enter her AD credentials in the Captive Portal and then get the same access as on her office computer. Her access to resources is based on rules in the R77 Firewall Rule Base.
To make this scenario work, the IT administrator must:
1) Enable Identity Awareness on a gateway and select Captive Portal as one of the Identity Sources.
2) In the Portal Settings window in the User Access section, make sure that Name and password login is selected.
3) Create a new rule in the Firewall Rule Base to let Jennifer McHanry access network destinations. Select accept as the Action.
4) Install policy.
Ms McHanry tries to access the resource but is unable. What should she do?

Question16: A client has created a new Gateway object that will be managed at a remote location. When the client attempts to install the Security Policy to the new Gateway object, the object does not appear in the Install On check box. What should you look for?

Question17: Web Control Layer has been set up using the settings in the following dialogue:

Consider the following policy and select the BEST answer.

Question18: Which component functions as the Internal Certificate Authority for R77?

Question19: What CLI utility allows an administrator to capture traffic along the firewall inspection chain?

Question20: Fill in the blank: RADIUS protocol uses ______ to communicate with the gateway.

Question21: Study the Rule base and Client Authentication Action properties screen.


After being authenticated by the Security Gateways, a user starts a HTTP connection to a Web site. What happens when the user tries to FTP to another site using the command line? The:

Question22: Which of the following commands can be used to remove site-to-site IPSEC Security Associations (SA)?

Question23: Which of the following is NOT an authentication scheme used for accounts created through SmartConsole?

Question24: What port is used for delivering logs from the gateway to the management server?

Question25: What is Consolidation Policy?

Question26: Choose the BEST describes the Policy Layer Traffic Inspection?

Question27: Tom has been tasked to install Check Point R80 in a distributed deployment. Before Tom installs the systems this way, how many machines will he need if he does NOT include a SmartConsole machine in his calculations?

Question28: Which Check Point software blade provides protection from zero-day and undiscovered threats?

Question29: An administrator is creating an IPsec site-to-site VPN between his corporate office and branch office. Both offices are protected by Check Point Security Gateway managed by the same Security Management Server. While configuring the VPN community to specify the pre-shared secret the administrator found that the check box to enable pre-shared secret is shared and cannot be enabled. Why does it not allow him to specify the pre-shared secret?

Question30: Fill in the blank: The _________ software blade enables Application Security policies to allow, block, or limit website access based on user, group, and machine identities.

Question31: Your company enforces a strict change control policy. Which of the following would be MOST effective for quickly dropping an attacker's specific active connection?

Question32: Fill in the blank: With the User Directory Software Blade, you can create R80 user definitions on a(an)
___________ Server.

Question33: To optimize Rule Base efficiency the most hit rules should be where?

Question34: Which of the completed statements is NOT true? The WebUI can be used to manage user accounts and:

Question35: Where can you trigger a failover of the cluster members?
Log in to Security Gateway CLI and run command clusterXL_admin down.
In SmartView Monitor right-click the Security Gateway member and select Cluster member stop.
Log into Security Gateway CLI and run command cphaprob down.

Question36: Which of the following is NOT an alert option?

Question37: Which of the following is NOT a valid option when configuring access for Captive Portal?

Question38: Choose the SmartLog property that is TRUE.

Question39: Which of the following is NOT a component of a Distinguished Name?

Question40: Fill in the blank: The __________ is used to obtain identification and security information about network users.

Question41: Fill in the blank: When LDAP is integrated with Check Point Security Management, it is then referred to as
_______

Question42: Which of the following is NOT a back up method?

Question43: Which of the following are types of VPN communicates?

Question44: When you upload a package or license to the appropriate repository in SmartUpdate, where is the package or license stored

Question45: Which options are given on features, when editing a Role on Gaia Platform?

Question46: How do you configure the Security Policy to provide uses access to the Captive Portal through an external (Internet) interface?

Question47: Review the following screenshot and select the BEST answer.

Question48: By default, which port does the WebUI listen on?

Question49: Which application should you use to install a contract file?

Question50: Which of the following actions do NOT take place in IKE Phase 1?

Question51: You have two rules, ten users, and two user groups in a Security Policy. You create database version 1 for this configuration. You then delete two existing users and add a new user group. You modify one rule and add two new rules to the Rule Base. You save the Security Policy and create database version 2. After a while, you decide to roll back to version 1 to use the Rule Base, but you want to keep your user database.
How can you do this?

Question52: You find a suspicious connection from a problematic host. You decide that you want to block everything from that whole network, not just the problematic host. You want to block this for an hour while you investigate further, but you do not want to add any rules to the Rule Base. How do you achieve this?

Question53: You find that Users are not prompted for authentication when they access their Web servers, even though you have created an HTTP rule via User Authentication. Choose the BEST reason why.

Question54: Fill in the blank: RADIUS Accounting gets ______ data from requests generated by the accounting client

Question55: If there is an Accept Implied Policy set to "First", what is the reason Jorge cannot see any logs?

Question56: Your boss wants you to closely monitor an employee suspected of transferring company secrets to the competition. The IT department discovered the suspect installed a WinSCP client in order to use encrypted communication. Which of the following methods is BEST to accomplish this task?

Question57: In the Check Point three-tiered architecture, which of the following is NOT a function of the Security Management Server (Security Management Server)?

Question58: Which utility shows the security gateway general system information statistics like operating system information and resource usage, and individual software blade statistics of VPN, Identity Awareness and DLP?

Question59: Which Threat Prevention Software Blade provides comprehensive against malicious and unwanted network traffic, focusing on application and server vulnerabilities?

Question60: AdminA and AdminB are both logged in on SmartConsole. What does it mean if AdminB sees a locked icon on a rule? Choose the BEST answer.

Question61: Sally has a Hot Fix Accumulator (HFA) she wants to install on her Security Gateway which operates with GAiA, but she cannot SCP the HFA to the system. She can SSH into the Security Gateway, but she has never been able to SCP files to it. What would be the most likely reason she cannot do so?

Question62: What statement is true regarding Visitor Mode?

Question63: Your users are defined in a Windows 2008 R2 Active Directory server. You must add LDAP users to a Client Authentication rule. Which kind of user group do you need in the Client Authentication rule in R77?

Question64: What is the Manual Client Authentication TELNET port?

Question65: The most important part of a site-to-site VPN deployment is the ________ .

Question66: Fill in the blank: Once a license is activated, a ________ should be installed.

Question67: Which of the following uses the same key to decrypt as it does to encrypt?

Question68: Fill in the blank: The R80 SmartConsole, SmartEvent GUI client, and _______ consolidate billions of logs and shows them as prioritized security events.

Question69: Which pre-defined Permission Profile should be assigned to an administrator that requires full access to audit all configurations without modifying them?

Question70: In SmartView Tracker, which rule shows when a packet is dropped due to anti-spoofing?

Question71: When launching SmartDashboard, what information is required to log into R77?

Question72: What is the appropriate default Gaia Portal address?

Question73: Which of the following is TRUE regarding Gaia command line?

Question74: What action can be performed from SmartUpdate R77?

Question75: What happens if the identity of a user is known?

Question76: What is also referred to as Dynamic NAT?

Question77: Which of the following statements accurately describes the command snapshot?

Question78: Which directory holds the SmartLog index files by default?

Question79: Choose what BEST describes users on Gaia Platform.

Question80: Look at the screenshot below. What CLISH command provides this output?

Question81: Administrator Kofi has just made some changes on his Management Server and then clicks on the Publish button in SmartConsole but then gets the error message shown in the screenshot below.
Where can the administrator check for more information on these errors?

Question82: Which command is used to obtain the configuration lock in Gaia?

Question83: How many users can have read/write access in Gaia at one time?

Question84: Choose the correct statement regarding Implicit Rules.

Question85: An internal router is sending UDP keep-alive packets that are being encapsulated with GRE and sent through your R77 Security Gateway to a partner site. A rule for GRE traffic is configured for ACCEPT/LOG.
Although the keep-alive packets are being sent every minute, a search through the SmartView Tracker logs for GRE traffic only shows one entry for the whole day (early in the morning after a Policy install).
Your partner site indicates they are successfully receiving the GRE encapsulated keep-alive packets on the 1-minute interval.
If GRE encapsulation is turned off on the router, SmartView Tracker shows a log entry for the UDP keep- alive packet every minute.
Which of the following is the BEST explanation for this behavior?

Question86: Fill in the blank: The tool _______ generates a R80 Security Gateway configuration report.

Question87: Which rule is responsible for the user authentication failure?

Question88: R80 Security Management Server can be installed on which of the following operating systems?

Question89: Which VPN routing option uses VPN routing for every connection a satellite gateway handles?

Question90: You are unable to login to SmartDashboard. You log into the management server and run #cpwd_admin list with the following output:

What reason could possibly BEST explain why you are unable to connect to SmartDashboard?

Question91: Which product correlates logs and detects security threats, providing a centralized display of potential attack patterns from all network devices?

Question92: Where do we need to reset the SIC on a gateway object?

Question93: Which tool CANNOT be launched from SmartUpdate R77?

Question94: What happens when you run the command: fw sam -J src [Source IP Address]?

Question95: What is the default method for destination NAT?

Question96: Fill in the blank: The IPS policy for pre-R80 gateways is installed during the _______ .

Question97: Which type of the Check Point license ties the package license to the IP address of the Security Management Server?

Question98: How many packets does the IKE exchange use for Phase 1 Main Mode?

Question99: Joey wants to configure NTP on R80 Security Management Server. He decided to do this via WebUI. What is the correct address to access the Web UI for Gaia platform via browser?

Question100: Vanessa is firewall administrator in her company; her company is using Check Point firewalls on central and remote locations, which are managed centrally by R80 Security Management Server. One central location has an installed R77.30 Gateway on Open server. Remote location is using Check Point UTM-1
570 series appliance with R71. Which encryption is used in Secure Internal Communication (SIC) between central management and firewall on each location?

Question101: Which of the following statements is TRUE about R80 management plug-ins?

Question102: Examine the following Rule Base.

What can we infer about the recent changes made to the Rule Base?

Question103: Which authentication scheme requires a user to possess a token?

Question104: A Cleanup rule:

Question105: Your manager requires you to setup a VPN to a new business partner site. The administrator from the partner site gives you his VPN settings and you notice that he setup AES 128 for IKE phase 1 and AES
256 for IKE phase 2. Why is this a problematic setup?

Question106: What are the three authentication methods for SIC?

Question107: Jack works for a managed service provider and he has been tasked to create 17 new policies for several new customers. He does not have much time. What is the BEST way to do this with R80 security management?

Question108: Anti-Spoofing is typically set up on which object type?

Question109: While in SmartView Tracker, Brady has noticed some very odd network traffic that he thinks could be an intrusion. He decides to block the traffic for 60 minutes, but cannot remember all the steps. What is the correct order of steps needed to set up the block?
1) Select Active Mode tab in SmartView Tracker.
2) Select Tools > Block Intruder.
3) Select Log Viewing tab in SmartView Tracker.
4) Set Blocking Timeout value to 60 minutes.
5) Highligh connection that should be blocked.

Question110: While enabling the Identity Awareness blade the Identity Awareness wizard does not automatically detect the windows domain. Why does it not detect the windows domain?

Question111: At what point is the Internal Certificate Authority (ICA) created?

Question112: Fill in the blank: Licenses can be added to the License and Contract repository ________ .

Question113: Joey is using the computer with IP address 192.168.20.13. He wants to access web page "www.Check Point.com", which is hosted on Web server with IP address 203.0.113.111. How many rules on Check Point Firewall are required for this connection?

Question114: You are the administrator for Alpha Corp. You have logged into your R80 Management server. You are making some changes in the Rule Base and notice that rule No.6 has a pencil icon next to it.

What does this mean?

Question115: DLP and Geo Policy are examples of what type of Policy?

Question116: What happens if the identity of a user is known?

Question117: Which utility allows you to configure the DHCP service on GAIA from the command line?

Question118: You are using SmartView Tracker to troubleshoot NAT entries. Which column do you check to view the NAT'd source port if you are using Source NAT?

Question119: What is the default time length that Hit Count Data is kept?

Question120: Which of the following is an identity acquisition method that allows a Security Gateway to identify Active Directory users and computers?

Question121: Which type of Endpoint Identity Agent includes packet tagging and computer authentication?

Question122: Which of the following is NOT an option for internal network definition of Anti-spoofing?

Question123: On the following picture an administrator configures Identity Awareness:

After clicking "Next" the above configuration is supported by:

Question124: You want to establish a VPN, using certificates. Your VPN will exchange certificates with an external partner. Which of the following activities sh you do first?

Question125: What are the two high availability modes?

Question126: Which R77 GUI would you use to see number of packets accepted since the last policy install?

Question127: Choose the Best place to find a Security Management Server backup file named backup_fw, on a Check Point Appliance.

Question128: When a packet arrives at the gateway, the gateway checks it against the rules in the top Policy Layer, sequentially from top to bottom, and enforces the first rule that matches a packet. Which of the following statements about the order of rule enforcement is true?

Question129: What are the two types of address translation rules?

Question130: Which command is used to add users to or from existing roles?

Question131: VPN gateways must authenticate to each other prior to exchanging information. What are the two types of credentials used for authentication?

Question132: Your bank's distributed R77 installation has Security Gateways up for renewal. Which SmartConsole application will tell you which Security Gateways have licenses that will expire within the next 30 days?

Question133: You are about to test some rule and object changes suggested in an R77 news group. Which backup solution should you use to ensure the easiest restoration of your Security Policy to its previous configuration after testing the changes?

Question134: Which of the following authentication methods can be configured in the Identity Awareness setup wizard?

Question135: Provide very wide coverage for all products and protocols, with noticeable performance impact.

How could you tune the profile in order to lower the CPU load still maintaining security at good level?
Select the BEST answer.

Question136: Which of the following firewall modes DOES NOT allow for Identity Awareness to be deployed?

Question137: Two administrators Dave and Jon both manage R80 Management as administrators for Alpha Corp. Jon logged into the R80 Management and then shortly after Dave logged in to the same server. They are both in the Security Policies view. From the screenshots below, why does Dave not have the rule no.6 in his SmartConsole view even though Jon has it his in his SmartConsole view?

Question138: Which of the following licenses are considered temporary?

Question139: The fw monitorutility is used to troubleshoot which of the following problems?

Question140: Vanessa is a Firewall administrator. She wants to test a backup of her company's production Firewall cluster Dallas_GW. She has a lab environment that is identical to her production environment. She decided to restore production backup via SmartConsole in lab environment. Which details she need to fill in System Restore window before she can click OK button and test the backup?

Question141: John Adams is an HR partner in the ACME organization. ACME IT wants to limit access to HR servers to designated IP addresses to minimize malware infection and unauthorized access risks. Thus, gateway policy permits access only from Join's desktop which is assigned an IP address 10.0.0.19 via DHCP.
John received a laptop and wants to access the HR Web Server from anywhere in the organization. The IT department gave the laptop a static IP address, but the limits him to operating it only from his desk. The current Rule Base contains a rule that lets John Adams access the HR Web Server from his laptop. He wants to move around the organization and continue to have access to the HR Web Server.
To make this scenario work, the IT administrator:
1) Enables Identity Awareness on a gateway, selects AD Query as one of the Identity Sources.
2) Adds an access role object to the Firewall Rule Base that lets John Adams PC access the HR Web Server from any machine and from any location.
John plugged in his laptop to the network on a different network segment and he is not able to connect.
How does he solve this problem?

Question142: Packages and licenses are loaded from all of theses sources EXCEPT

Question143: What does it mean if Bob gets this result on an object search? Refer to the image below. Choose the BEST answer.

Question144: Where does the security administrator activate Identity Awareness within SmartDashboard?

Question145: You have configured SNX on the Security Gateway. The client connects to the Security Gateway and the user enters the authentication credentials. What must happen after authentication that allows the client to connect to the Security Gateway's VPN domain?

Question146: How do you configure an alert in SmartView Monitor?

Question147: You are conducting a security audit. While reviewing configuration files and logs, you notice logs accepting POP3 traffic, but you do not see a rule allowing POP3 traffic in the Rule Base. Which of the following is the most likely cause?

Question148: Which of the following is TRUE about the Check Point Host object?

Question149: Fill in the blanks: In the Network policy layer, the default action for the Implied last rule is ________ all traffic. However, in the Application Control policy layer, the default action is ________ all traffic.

Question150: What is the purpose of Captive Portal?

Question151: Which of the below is the MOST correct process to reset SIC from SmartDashboard?

Question152: Fill in the blanks: The Application Layer Firewalls inspect traffic through the ________ layer(s) of the TCP/ IP model and up to and including the ________ layer.

Question153: Which default user has full read/write access?

Question154: Harriet wants to protect sensitive information from intentional loss when users browse to a specific URL:
https://personal.mymail.com, which blade will she enable to achieve her goal?

Question155: What is the potential downside or drawback to choosing the Standalone deployment option instead of the Distributed deployment option?

Question156: There are two R77.30 Security Gateways in the Firewall Cluster. They are named FW_A and FW_B. The cluster is configured to work as HA (High availability) with default cluster configuration. FW_A is configured to have higher priority than FW_B. FW_A was active and processing the traffic in the morning. FW_B was standby. Around 1100 am, its interfaces went down and this caused a failover. FW_B became active. After an hour, FW_A's interface issues were resolved and it became operational. When it re-joins the cluster, will it become active automatically?

Question157: Alpha Corp., and have recently returned from a training course on Check Point's new advanced R80 management platform. You are presenting an in-house R80 Management to the other administrators in Alpha Corp.

How will you describe the new "Publish" button in R80 Management Console?

Question158: In R80 spoofing is defined as a method of:

Question159: Fill in the blanks: A Check Point software license consists of a _______ and _______ .

Question160: When doing a Stand-Alone Installation, you would install the Security Management Server with which other Check Point architecture component?

Question161: Tina is a new administrator who is currently reviewing the new Check Point R80 Management console interface. In the Gateways view, she is reviewing the Summary screen as in the screenshot below. What as an 'Open Server'?

Question162: MyCorp has the following NAT rules. You need to disable the NAT function when Alpha-internal networks try to reach the Google DNS (8.8.8.8) server.
What can you do in this case?

Question163: Mesh and Star are two types of VPN topologies. Which statement below is TRUE about these types of communities?

Question164: In R80, Unified Policy is a combination of

Question165: You manage a global network extending from your base in Chicago to Tokyo, Calcutta and Dallas.
Management wants a report detailing the current software level of each Enterprise class Security Gateway.
You plan to take the opportunity to create a proposal outline, listing the most cost-effective way to upgrade your Gateways. Which two SmartConsole applications will you use to create this report and outline?

Question166: View the rule below. What does the lock-symbol in the left column mean? Select the BEST answer.

Question167: The organization's security manager wishes to back up just the Gaia operating system parameters. Which command can be used to back up only Gaia operating system parameters like interface details, Static routes and Proxy ARP entries?

Question168: Which of the following is NOT an integral part of VPN communication within a network?

Question169: What is the default shell for the command line interface?

Question170: Fill in the blank: Browser-based Authentication sends users to a web page to acquire identities using
________ .

Question171: On the following graphic, you will find layers of policies.

What is a precedence of traffic inspection for the defined polices?

Question172: As you review this Security Policy, what changes could you make to accommodate Rule 4?

Question173: You have enabled "Full Log" as a tracking option to a security rule. However, you are still not seeing any data type information. What is the MOST likely reason?

Question174: Which of the following is NOT defined by an Access Role object?

Question175: As a Security Administrator, you must refresh the Client Authentication authorized time-out every time a new user connection is authorized. How do you do this? Enable the Refreshable Timeout setting:

Question176: Which of these attributes would be critical for a site-to-site VPN?

Question177: Which one of the following is the preferred licensing model? Select the Best answer.

Question178: You are the Security Administrator for MegaCorp. In order to see how efficient your firewall Rule Base is, you would like to see how many often the particular rules match. Where can you see it? Give the BEST answer.

Question179: Fill in the blank: A new license should be generated and installed in all of the following situations EXCEPT when ________ .

Question180: Fill in the blanks: VPN gateways authenticate using ___________ and ___________ .

Question181: Which of the following is NOT a license activation method?

Question182: Fill in the blank: A _______ is used by a VPN gateway to send traffic as if it were a physical interface.

Question183: What port is used for communication to the User Center with SmartUpdate?

Question184: ALPHA Corp has a new administrator who logs into the Gaia Portal to make some changes. He realizes that even though he has logged in as an administrator, he is unable to make any changes because all configuration options are greyed out as shown in the screenshot image below. What is the likely cause for this?

Question185: MegaCorp's security infrastructure separates Security Gateways geographically. You must request a central license for one remote Security Gateway.
How do you apply the license?

Question186: Review the rules. Assume domain UDP is enabled in the implied rules.

What happens when a user from the internal network tries to browse to the internet using HTTP? The user:

Question187: Which of the following is NOT an element of VPN Simplified Mode and VPN Communities?

Question188: In order to modify Security Policies the administrator can use which of the following tools? Select the BEST answer.

Question189: You installed Security Management Server on a computer using GAiA in the MegaCorp home office. You use IP address 10.1.1.1. You also installed the Security Gateway on a second GAiA computer, which you plan to ship to another Administrator at a MegaCorp hub office. What is the correct order for pushing SIC certificates to the Gateway before shipping it?
1. Run cpconfig on the Gateway, select Secure Internal Communication, enter the activation key, and reconfirm.
2. Initialize Internal Certificate Authority (ICA) on the Security Management Server.
3. Configure the Gateway object with the host name and IP addresses for the remote site.
4. Click the Communication button in the Gateway object's General screen, enter the activation key, and click Initialize and OK.
5. Install the Security Policy.

Question190: Match the following commands to their correct function. Each command has one function only listed.

Question191: When Identity Awareness is enabled, which identity source(s) is(are) used for Application Control?

Question192: What is the order of NAT priorities?

Question193: After the initial installation the First Time Configuration Wizard should be run. Select the BEST answer.

Question194: Which of these components does NOT require a Security Gateway R77 license?

Question195: What does the "unknown" SIC status shown on SmartConsole mean?

Question196: Which feature in R77 permits blocking specific IP addresses for a specified time period?

Question197: Which feature is NOT provided by all Check Point Mobile Access solutions?

Question198: Which of the following technologies extracts detailed information from packets and stores that information in state tables?

Question199: The technical-support department has a requirement to access an intranet server. When configuring a User Authentication rule to achieve this, which of the following should you remember?

Question200: Which policy type is used to enforce bandwidth and traffic control rules?

Question201: Which of the following is NOT a SecureXL traffic flow?

Question202: Choose what BEST describes a Session.

Question203: You are going to upgrade from R77 to R80. Before the upgrade, you want to back up the system so that, if there are any problems, you can easily restore to the old version with all configuration and management files intact. What is the BEST backup method in this scenario?

Question204: Which Check Point feature enables application scanning and the detection?

Question205: The security Gateway is installed on GAiA R80 The default port for the WEB User Interface is _______ .

Question206: The Gaia operating system supports which routing protocols?

Question207: You believe Phase 2 negotiations are failing while you are attempting to configure a site-to-site VPN with one of your firm's business partners. Which SmartConsole application should you use to confirm your suspicious?

Question208: The IT Management team is interested in the new features of the Check Point R80 Management and wants to upgrade but they are concerned that the existing R77.30 Gaia Gateways cannot be managed by R80 because it is so different. As the administrator responsible for the Firewalls, how can you answer or confirm these concerns?

Question209: If there are two administrators logged in at the same time to the SmartConsole, and there are objects locked for editing, what must be done to make them available to other administrators? Choose the BEST answer.

Question210: You are about to integrate RSA SecurID users into the Check Point infrastructure. What kind of users are to be defined via SmartDashboard?

Question211: Which of the following ClusterXL modes uses a non-unicast MAC address for the cluster IP address.

Question212: The Captive Portal tool:

Question213: Bob and Joe both have Administrator Roles on their Gaia Platform. Bob logs in on the WebUI and then Joe logs in through CLI. Choose what BEST describes the following scenario, where Bob and Joe are both logged in:

Question214: John Adams is an HR partner in the ACME organization. ACME IT wants to limit access to HR servers to designated IP addresses to minimize malware infection and unauthorized access risks. Thus, the gateway policy permits access only from John's desktop which is assigned a static IP address 10.0.0.19.
John received a laptop and wants to access the HR Web Server from anywhere in the organization. The IT department gave the laptop a static IP address, but that limits him to operating it only from his desk. The current Rule Base contains a rule that lets John Adams access the HR Web Server from his desktop with a static IP (10.0.0.19). He wants to move around the organization and continue to have access to the HR Web Server.
To make this scenario work, the IT administrator:
1) Enables Identity Awareness on a gateway, selects AD Query as one of the Identity Sources installs the policy.
2) Adds an access role object to the Firewall Rule Base that lets John Adams PC access the HR Web Server from any machine and from any location.
3) Changes from static IP address to DHCP for the client PC.
What should John request when he cannot access the web server from his laptop?

Question215: Which set of objects have an Authentication tab?

Question216: Which policy type has its own Exceptions section?

Question217: You are working with multiple Security Gateways enforcing an extensive number of rules. To simplify security administration, which action would you choose?

Question218: Fill in the blank: The R80 utility fw monitoris used to troubleshoot _____________

Question219: According to Check Point Best Practice, when adding a non-managed Check Point Gateway to a Check Point security solution what object SHOULD be added? A(n):

Question220: Why would an administrator see the message below?

Question221: Can a Check Point gateway translate both source IP address and destination IP address in a given packet?

Question222: Kofi, the administrator of the ALPHA Corp network wishes to change the default Gaia WebUI Portal port number currently set on the default HTTPS port. Which CLISH commands are required to be able to change this TCP port?

Question223: Katie has been asked to do a backup on the Blue Security Gateway. Which command would accomplish this in the Gaia CLI?

Question224: You want to define a selected administrator's permission to edit a layer. However, when you click the + sign in the "Select additional profile that will be able edit this layer" you do not see anything. What is the most likely cause of this problem? Select the BEST answer.

Question225: What are the three conflict resolution rules in the Threat Prevention Policy Layers?

Question226: In which deployment is the security management server and Security Gateway installed on the same appliance?

Question227: In which VPN community is a satellite VPN gateway not allowed to create a VPN tunnel with another satellite VPN gateway?

Question228: When attempting to start a VPN tunnel, in the logs the error 'no proposal chosen' is seen numerous times.
No other VPN-related log entries are present. Which phase of the VPN negotiations has failed?

Question229: All R77 Security Servers can perform authentication with the exception of one. Which of the Security Servers can NOT perform authentication?

Question230: Where can administrator edit a list of trusted SmartConsole clients in R80?

Question231: Which Check Point software blade prevents malicious files from entering a network using virus signatures and anomaly-based protections from ThreatCloud?

Question232: Which of the following is NOT a set of Regulatory Requirements related to Information Security?

Question233: Which of the following is NOT a VPN routing option available in a star community?

Question234: Message digests use which of the following?

Question235: What does ExternalZone represent in the presented rule?

Question236: NAT can NOT be configured on which of the following objects?

Question237: Which of the following is a hash algorithm?

Question238: Fill in the blank: Gaia can be configured using the _______ or ______ .

Question239: Fill in the blank: To build an effective Security Policy, use a ________ and _______ rule.

Question240: Which of the following are available SmartConsole clients which can be installed from the R77 Windows CD? Read all answers and select the most complete and valid list.

Question241: With which command can view the running configuration of Gaia-based system.

Question242: Which SmartConsole component can Administrators use to track changes to the Rule Base?

Question243: You work as a security administrator for a large company. CSO of your company has attended a security conference where he has learnt how hackers constantly modify their strategies and techniques to evade detection and reach corporate resources. He wants to make sure that his company has the right protections in place. Check Point has been selected for the security vendor. Which Check Point products protects BEST against malware and zero-day attacks while ensuring quick delivery of safe content to your users?

Question244: Fill in the blank: The R80 feature ________ permits blocking specific IP addresses for a specified time period.

Question245: Where would an administrator enable Implied Rules logging?

Question246: Fill in the blank: The command __________ provides the most complete restoration of a R80 configuration.

Question247: Which information is included in the "Full Log" tracking option, but is not included in the "Log" tracking option?

Question248: rd
According to Check Point Best Practice, when adding a 3 party gateway to a Check Point security solution what object SHOULD be added? A(n):

Question249: When using LDAP as an authentication method for Identity Awareness, the query: