EMT Practice Test

1. Question Content...

---

Question1: Packet acceleration (SecureXL) identifies connections by several attributes. Which of the attributes is NOT used for identifying connection?

Question2: There are two R77.30 Security Gateways in the Firewall Cluster. They are named FW_A and FW_B. The cluster is configured to work as HA (High availability) with default cluster configuration. FW_A is configured to have higher priority than FW_B. FW_A was active and processing the traffic in the morning. FW_B was standby. Around 1100 am, its interfaces went down and this caused a failover. FW_B became active. After an hour, FW_A's interface issues were resolved and it became operational. When it re-joins the cluster, will it become active automatically?

Question3: Which Check Point software blade provides visibility of users, groups and machines while also providing access control through identity-based policies?

Question4: When you upload a package or license to the appropriate repository in SmartUpdate, where is the package or license stored

Question5: Which Check Point software blade provides protection from zero-day and undiscovered threats?

Question6: Check Point APIs allow system engineers and developers to make changes to their organization's security policy with CLI tools and Web Services for all of the following except:

Question7: Administrator Dave logs into R80 Management Server to review and makes some rule changes. He notices that there is a padlock sign next to the DNS rule in the Rule Base.

What is the possible explanation for this?

Question8: Which tool CANNOT be launched from SmartUpdate R77?

Question9: Which of the following is NOT defined by an Access Role object?

Question10: At what point is the Internal Certificate Authority (ICA) created?

Question11: You want to define a selected administrator's permission to edit a layer. However, when you click the + sign in the "Select additional profile that will be able edit this layer" you do not see anything. What is the most likely cause of this problem? Select the BEST answer.

Question12: What is the difference between an event and a log?

Question13: What is the difference between SSL VPN and IPSec VPN?

Question14: Which remote Access Solution is clientless?

Question15: Which option would allow you to make a backup copy of the OS and Check Point configuration, without stopping Check Point processes?

Question16: What happens if the identity of a user is known?

Question17: Choose the SmartLog property that is TRUE.

Question18: Your boss wants you to closely monitor an employee suspected of transferring company secrets to the competition. The IT department discovered the suspect installed a WinSCP client in order to use encrypted communication. Which of the following methods is BEST to accomplish this task?

Question19: Provide very wide coverage for all products and protocols, with noticeable performance impact.

How could you tune the profile in order to lower the CPU load still maintaining security at good level?
Select the BEST answer.

Question20: When a packet arrives at the gateway, the gateway checks it against the rules in the top Policy Layer, sequentially from top to bottom, and enforces the first rule that matches a packet. Which of the following statements about the order of rule enforcement is true?

Question21: The WebUI offers three methods for downloading Hotfixes via CPUSE. One of them is Automatic method.
How many times per day will CPUSE agent check for hotfixes and automatically download them?

Question22: Mesh and Star are two types of VPN topologies. Which statement below is TRUE about these types of communities?

Question23: What happens when you run the command: fw sam -J src [Source IP Address]?

Question24: The system administrator of a company is trying to find out why acceleration is not working for the traffic.
The traffic is allowed according to the rule base and checked for viruses. But it is not accelerated. What is the most likely reason that the traffic is not accelerated?

Question25: Which of the following is NOT a license activation method?

Question26: Which of the following is NOT a tracking option? (Select three)

Question27: What is the command to see cluster status in cli expert mode?

Question28: On the following picture an administrator configures Identity Awareness:

After clicking "Next" the above configuration is supported by:

Question29: What port is used for delivering logs from the gateway to the management server?

Question30: Which of the following is NOT a valid option when configuring access for Captive Portal?

Question31: Which of the following is a hash algorithm?

Question32: Where do we need to reset the SIC on a gateway object?

Question33: MyCorp has the following NAT rules. You need to disable the NAT function when Alpha-internal networks try to reach the Google DNS (8.8.8.8) server.
What can you do in this case?

Question34: In what way are SSL VPN and IPSec VPN different?

Question35: In SmartView Tracker, which rule shows when a packet is dropped due to anti-spoofing?

Question36: Which SmartConsole component can Administrators use to track changes to the Rule Base?

Question37: In Logging and Monitoring, the tracking options are Log, Detailed Log and Extended Log. Which of the following options can you add to each Log, Detailed Log and Extended Log?

Question38: What is the purpose of Priority Delta in VRRP?

Question39: Fill in the blank: In Security Gateways R75 and above, SIC uses ______________ for encryption.

Question40: What Identity Agent allows packet tagging and computer authentication?

Question41: Can multiple administrators connect to a Security Management Server at the same time?

Question42: Fill in the blank: A _______ is used by a VPN gateway to send traffic as if it were a physical interface.

Question43: What port is used for communication to the User Center with SmartUpdate?

Question44: Choose what BEST describes a Session.

Question45: Choose what BEST describes the Policy Layer Traffic Inspection.

Question46: Which the following type of authentication on Mobile Access can NOT be used as the first authentication method?

Question47: Identify the API that is not supported by Check Point currently.

Question48: Choose the Best place to find a Security Management Server backup file named backup_fw, on a Check Point Appliance.

Question49: Which NAT rules are prioritized first?

Question50: Which of the following statements accurately describes the command snapshot?

Question51: As a Security Administrator, you must refresh the Client Authentication authorized time-out every time a new user connection is authorized. How do you do this? Enable the Refreshable Timeout setting:

Question52: Which information is included in the "Full Log" tracking option, but is not included in the "Log" tracking option?

Question53: You installed Security Management Server on a computer using GAiA in the MegaCorp home office. You use IP address 10.1.1.1. You also installed the Security Gateway on a second GAiA computer, which you plan to ship to another Administrator at a MegaCorp hub office. What is the correct order for pushing SIC certificates to the Gateway before shipping it?
1. Run cpconfig on the Gateway, select Secure Internal Communication, enter the activation key, and reconfirm.
2. Initialize Internal Certificate Authority (ICA) on the Security Management Server.
3. Configure the Gateway object with the host name and IP addresses for the remote site.
4. Click the Communication button in the Gateway object's General screen, enter the activation key, and click Initialize and OK.
5. Install the Security Policy.

Question54: Of all the Check Point components in your network, which one changes most often and should be backed up most frequently?

Question55: Message digests use which of the following?

Question56: If the first packet of an UDP session is rejected by a security policy, what does the firewall send to the client?

Question57: What are the three tabs available in SmartView Tracker?

Question58: During the Check Point Stateful Inspection Process, for packets that do not pass Firewall Kernel Inspection and are rejected by the rule definition, packets are:

Question59: Which limitation of CoreXL is overcome by using (mitigated by) Multi-Queue?

Question60: How do you configure the Security Policy to provide uses access to the Captive Portal through an external (Internet) interface?

Question61: Which of the following is NOT a set of Regulatory Requirements related to Information Security?

Question62: Fill in the blank: Service blades must be attached to a ______________.

Question63: When using LDAP as an authentication method for Identity Awareness, the query:

Question64: Which one of the following is the preferred licensing model? Select the Best answer.

Question65: The security Gateway is installed on GAiA R80 The default port for the WEB User Interface is _______ .

Question66: What is the default time length that Hit Count Data is kept?

Question67: Fill in the blank: The _________ software blade enables Application Security policies to allow, block, or limit website access based on user, group, and machine identities.

Question68: You are about to test some rule and object changes suggested in an R77 news group. Which backup solution should you use to ensure the easiest restoration of your Security Policy to its previous configuration after testing the changes?

Question69: Which path below is available only when CoreXL is enabled?

Question70: Which of the completed statements is NOT true? The WebUI can be used to manage user accounts and:

Question71: Look at the following screenshot and select the BEST answer.

Question72: Fill in the blank: RADIUS Accounting gets ______ data from requests generated by the accounting client

Question73: Where does the security administrator activate Identity Awareness within SmartDashboard?

Question74: In the R80 SmartConsole, on which tab are Permissions and Administrators defined?

Question75: SmartEvent does NOT use which of the following procedures to identity events:

Question76: Your manager requires you to setup a VPN to a new business partner site. The administrator from the partner site gives you his VPN settings and you notice that he setup AES 128 for IKE phase 1 and AES
256 for IKE phase 2. Why is this a problematic setup?

Question77: According to Check Point Best Practice, when adding a non-managed Check Point Gateway to a Check Point security solution what object SHOULD be added? A(n):

Question78: What component of R80 Management is used for indexing?

Question79: Review the rules. Assume domain UDP is enabled in the implied rules.

What happens when a user from the internal network tries to browse to the internet using HTTP? The user:

Question80: If there is an Accept Implied Policy set to "First", what is the reason Jorge cannot see any logs?

Question81: Bob and Joe both have Administrator Roles on their Gaia Platform. Bob logs in on the WebUI and then Joe logs in through CLI. Choose what BEST describes the following scenario, where Bob and Joe are both logged in:

Question82: Fill in the blanks: A High Availability deployment is referred to as a ______ cluster and a Load Sharing deployment is referred to as a ________ cluster.

Question83: While in SmartView Tracker, Brady has noticed some very odd network traffic that he thinks could be an intrusion. He decides to block the traffic for 60 minutes, but cannot remember all the steps. What is the correct order of steps needed to set up the block?
1) Select Active Mode tab in SmartView Tracker.
2) Select Tools > Block Intruder.
3) Select Log Viewing tab in SmartView Tracker.
4) Set Blocking Timeout value to 60 minutes.
5) Highlight connection that should be blocked.

Question84: Fill in the blank: Licenses can be added to the License and Contract repository ________ .

Question85: Your bank's distributed R77 installation has Security Gateways up for renewal. Which SmartConsole application will tell you which Security Gateways have licenses that will expire within the next 30 days?

Question86: Which two of these Check Point Protocols are used by _____ ?

Question87: Vanessa is expecting a very important Security Report. The Document should be sent as an attachment via e-mail. An e-mail with Security_report.pdf file was delivered to her e-mail inbox. When she opened the PDF file, she noticed that the file is basically empty and only few lines of text are in it. The report is missing some graphs, tables and links. Which component of SandBlast protection is her company using on a Gateway?

Question88: You are about to integrate RSA SecurID users into the Check Point infrastructure. What kind of users are to be defined via SmartDashboard?

Question89: Which pre-defined Permission Profile should be assigned to an administrator that requires full access to audit all configurations without modifying them?

Question90: To fully enable Dynamic Dispatcher on a Security Gateway:

Question91: Where can administrator edit a list of trusted SmartConsole clients in R80?

Question92: The Firewall kernel is replicated multiple times, therefore:

Question93: Kofi, the administrator of the ABC Corp network wishes to change the default Gaia WebUI Portal port number currently set on the default HTTPS port. Which CLISH commands are required to be able to change this TCP port?

Question94: Which command can you use to verify the number of active concurrent connections?

Question95: As you review this Security Policy, what changes could you make to accommodate Rule 4?

Question96: What is the best sync method in the ClusterXL deployment?

Question97: You have just installed your Gateway and want to analyze the packet size distribution of your traffic with SmartView Monitor.

Unfortunately, you get the message:
"There are no machines that contain Firewall Blade and SmartView Monitor".
What should you do to analyze the packet size distribution of your traffic? Give the BEST answer.

Question98: With which command can you view the running configuration of Gaia-based system.

Question99: Fill in the blank: When tunnel test packets no longer invoke a response, SmartView Monitor displays
_____________ for the given VPN tunnel.

Question100: John Adams is an HR partner in the ACME organization. ACME IT wants to limit access to HR servers to designated IP addresses to minimize malware infection and unauthorized access risks. Thus, the gateway policy permits access only from John's desktop which is assigned a static IP address 10.0.0.19.
John received a laptop and wants to access the HR Web Server from anywhere in the organization. The IT department gave the laptop a static IP address, but that limits him to operating it only from his desk. The current Rule Base contains a rule that lets John Adams access the HR Web Server from his desktop with a static IP (10.0.0.19). He wants to move around the organization and continue to have access to the HR Web Server.
To make this scenario work, the IT administrator:
1) Enables Identity Awareness on a gateway, selects AD Query as one of the Identity Sources installs the policy.
2) Adds an access role object to the Firewall Rule Base that lets John Adams PC access the HR Web Server from any machine and from any location.
3) Changes from static IP address to DHCP for the client PC.
What should John request when he cannot access the web server from his laptop?

Question101: When doing a Stand-Alone Installation, you would install the Security Management Server with which other Check Point architecture component?

Question102: Fill in the blank: A new license should be generated and installed in all of the following situations EXCEPT when ________ .

Question103: Which of the following licenses are considered temporary?

Question104: What is the SOLR database for?

Question105: Fill in the blank: In order to install a license, it must first be added to the ____________.

Question106: Fill in the blanks: A security Policy is created in _________ , stored in the _________ , and Distributed to the various __________ .

Question107: After the initial installation the First Time Configuration Wizard should be run. Select the BEST answer.

Question108: Which is the correct order of a log flow processed by SmartEvent components:

Question109: Which of the following commands can be used to remove site-to-site IPSEC Security Associations (SA)?

Question110: You are the Security Administrator for MegaCorp. In order to see how efficient your firewall Rule Base is, you would like to see how many often the particular rules match. Where can you see it? Give the BEST answer.

Question111: Which command shows the installed licenses?

Question112: Fill in the blank: Once a license is activated, a ________ should be installed.

Question113: To ensure that VMAC mode is enabled, which CLI command you should run on all cluster members?
Choose the best answer.

Question114: AdminA and AdminB are both logged in on SmartConsole. What does it mean if AdminB sees a locked icon on a rule? Choose the BEST answer.

Question115: Which of the following is TRUE regarding Gaia command line?

Question116: In SmartEvent, what are the different types of automatic reactions that the administrator can configure?

Question117: The fw monitorutility is used to troubleshoot which of the following problems?

Question118: Which type of Endpoint Identity Agent includes packet tagging and computer authentication?

Question119: Which Check Point software blade prevents malicious files from entering a network using virus signatures and anomaly-based protections from ThreatCloud?

Question120: Using mgmt_cli, what is the correct syntax to import a host object called Server_1 from the CLI?

Question121: If there are two administrators logged in at the same time to the SmartConsole, and there are objects locked for editing, what must be done to make them available to other administrators? Choose the BEST answer.

Question122: Fill in the blank: Browser-based Authentication sends users to a web page to acquire identities using
________ .

Question123: What are types of Check Point APIs available currently as part of R80.10 code?

Question124: Sally has a Hot Fix Accumulator (HFA) she wants to install on her Security Gateway which operates with GAiA, but she cannot SCP the HFA to the system. She can SSH into the Security Gateway, but she has never been able to SCP files to it. What would be the most likely reason she cannot do so?

Question125: Which of these components does NOT require a Security Gateway R77 license?

Question126: Look at the screenshot below. What CLISH command provides this output?

Question127: When defining QoS global properties, which option below is not valid?

Question128: What needs to be configured if the NAT property 'Translate destination on client side' is not enabled in Global properties?

Question129: Fill in the blank: The tool _______ generates a R80 Security Gateway configuration report.

Question130: John Adams is an HR partner in the ACME organization. ACME IT wants to limit access to HR servers to designated IP addresses to minimize malware infection and unauthorized access risks. Thus, gateway policy permits access only from Join's desktop which is assigned an IP address 10.0.0.19 via DHCP.
John received a laptop and wants to access the HR Web Server from anywhere in the organization. The IT department gave the laptop a static IP address, but the limits him to operating it only from his desk. The current Rule Base contains a rule that lets John Adams access the HR Web Server from his laptop. He wants to move around the organization and continue to have access to the HR Web Server.
To make this scenario work, the IT administrator:
1) Enables Identity Awareness on a gateway, selects AD Query as one of the Identity Sources.
2) Adds an access role object to the Firewall Rule Base that lets John Adams PC access the HR Web Server from any machine and from any location.
John plugged in his laptop to the network on a different network segment and he is not able to connect.
How does he solve this problem?

Question131: There are 4 ways to use the Management API for creating host object with R80 Management API. Which one is NOT correct?

Question132: Fill in the blank: When LDAP is integrated with Check Point Security Management, it is then referred to as
_______

Question133: Which of the following is TRUE about the Check Point Host object?

Question134: Fill in the blank: The IPS policy for pre-R80 gateways is installed during the _______ .

Question135: Fill in the blank: To build an effective Security Policy, use a ________ and _______ rule.

Question136: Customer's R80 management server needs to be upgraded to R80.10. What is the best upgrade method when the management server is not connected to the Internet?

Question137: Can a Check Point gateway translate both source IP address and destination IP address in a given packet?

Question138: Fill in the blanks: The Application Layer Firewalls inspect traffic through the ________ layer(s) of the TCP/ IP model and up to and including the ________ layer.

Question139: Fill in the blanks: A Check Point software license consists of a _______ and _______ .

Question140: What CLI utility allows an administrator to capture traffic along the firewall inspection chain?

Question141: Which options are given on features, when editing a Role on Gaia Platform?

Question142: The Captive Portal tool:

Question143: Which of the following uses the same key to decrypt as it does to encrypt?

Question144: What is the default shell for the command line interface?

Question145: Packages and licenses are loaded from all of these sources EXCEPT

Question146: You believe Phase 2 negotiations are failing while you are attempting to configure a site-to-site VPN with one of your firm's business partners. Which SmartConsole application should you use to confirm your suspicious?

Question147: Which default user has full read/write access?

Question148: What is the appropriate default Gaia Portal address?

Question149: Anti-Spoofing is typically set up on which object type?

Question150: Which command can you use to enable or disable multi-queue per interface?

Question151: Fill in the blanks: In the Network policy layer, the default action for the Implied last rule is ________ all traffic. However, in the Application Control policy layer, the default action is ________ all traffic.

Question152: Study the Rule base and Client Authentication Action properties screen.


After being authenticated by the Security Gateways, a user starts a HTTP connection to a Web site. What happens when the user tries to FTP to another site using the command line? The:

Question153: Tom has been tasked to install Check Point R80 in a distributed deployment. Before Tom installs the systems this way, how many machines will he need if he does NOT include a SmartConsole machine in his calculations?

Question154: Which of the following is NOT an advantage to using multiple LDAP servers?

Question155: Harriet wants to protect sensitive information from intentional loss when users browse to a specific URL:
https://personal.mymail.com, which blade will she enable to achieve her goal?

Question156: The technical-support department has a requirement to access an intranet server. When configuring a User Authentication rule to achieve this, which of the following should you remember?

Question157: What statement is true regarding Visitor Mode?

Question158: On the following graphic, you will find layers of policies.

What is a precedence of traffic inspection for the defined polices?

Question159: Which command is used to obtain the configuration lock in Gaia?

Question160: Which of the following technologies extracts detailed information from packets and stores that information in state tables?

Question161: Tina is a new administrator who is currently reviewing the new Check Point R80 Management console interface. In the Gateways view, she is reviewing the Summary screen as in the screenshot below. What as an 'Open Server'?

Question162: Which directory holds the SmartLog index files by default?

Question163: Joey is using the computer with IP address 192.168.20.13. He wants to access web page "www.Check Point.com", which is hosted on Web server with IP address 203.0.113.111. How many rules on Check Point Firewall are required for this connection?

Question164: When using GAiA, it might be necessary to temporarily change the MAC address of the interface eth 0to
00:0C:29:12:34:56. After restarting the network the old MAC address should be active. How do you configure this change?

Question165: NAT can NOT be configured on which of the following objects?

Question166: Fill in the blank: An LDAP server holds one or more ______________.

Question167: Which component functions as the Internal Certificate Authority for R77?

Question168: What is the potential downside or drawback to choosing the Standalone deployment option instead of the Distributed deployment option?

Question169: Fill in the blank: RADIUS protocol uses ______ to communicate with the gateway.

Question170: SandBlast has several functional components that work together to ensure that attacks are prevented in real-time. Which the following is NOT part of the SandBlast component?

Question171: Which policy type has its own Exceptions section?

Question172: What does the "unknown" SIC status shown on SmartConsole mean?

Question173: Sticky Decision Function (SDF) is required to prevent which of the following? Assume you set up an Active-Active cluster.

Question174: What does it mean if Bob gets this result on an object search? Refer to the image below. Choose the BEST answer.

Question175: The IT Management team is interested in the new features of the Check Point R80 Management and wants to upgrade but they are concerned that the existing R77.30 Gaia Gateways cannot be managed by R80 because it is so different. As the administrator responsible for the Firewalls, how can you answer or confirm these concerns?

Question176: Fill in the blank: The ________ feature allows administrators to share a policy with other policy packages.

Question177: Administrator wishes to update IPS from SmartConsole by clicking on the option "update now" under the IPS tab. Which device requires internet access for the update to work?

Question178: You want to reset SIC between smberlin and sgosaka.

In SmartDashboard, you choose sgosaka, Communication, Reset. On sgosaka, you start cpconfig, choose Secure Internal Communication and enter the new SIC Activation Key. The screen reads The SIC was successfully initialized and jumps back to the menu. When trying to establish a connection, instead of a working connection, you receive this error message:

What is the reason for this behavior?

Question179: Which feature in R77 permits blocking specific IP addresses for a specified time period?

Question180: Which statement is NOT TRUE about Delta synchronization?

Question181: Office mode means that:

Question182: John is using Management HA. Which Smartcenter should be connected to for making changes?

Question183: Katie has been asked to do a backup on the Blue Security Gateway. Which command would accomplish this in the Gaia CLI?

Question184: What happens if the identity of a user is known?

Question185: Which one of the following is true about Threat Extraction?

Question186: How would you deploy TE250X Check Point appliance just for email traffic and in-line mode without a Check Point Security Gateway?

Question187: Your company enforces a strict change control policy. Which of the following would be MOST effective for quickly dropping an attacker's specific active connection?

Question188: You want to establish a VPN, using certificates. Your VPN will exchange certificates with an external partner. Which of the following activities sh you do first?

Question189: Which type of Check Point license is tied to the IP address of a specific Security Gateway and cannot be transferred to a gateway that has a different IP address?

Question190: Which of the following is NOT a back up method?

Question191: Which set of objects have an Authentication tab?

Question192: Under which file is the proxy arp configuration stored?

Question193: Why would an administrator see the message below?

Question194: Where would an administrator enable Implied Rules logging?

Question195: To install a brand new Check Point Cluster, the MegaCorp IT department bought 1 Smart-1 and 2 Security Gateway Appliances to run a cluster. Which type of cluster is it?

Question196: When logging in for the first time to a Security management Server through SmartConsole, a fingerprint is saved to the:

Question197: Fill in the blank: The R80 SmartConsole, SmartEvent GUI client, and _______ consolidate billions of logs and shows them as prioritized security events.

Question198: Which rule is responsible for the user authentication failure?

Question199: Which of the following commands is used to monitor cluster members?

Question200: R80 Security Management Server can be installed on which of the following operating systems?

Question201: Which authentication scheme requires a user to possess a token?

Question202: What is the default method for destination NAT?

Question203: The most important part of a site-to-site VPN deployment is the ________ .

Question204: Which of the following is NOT an alert option?

Question205: You are conducting a security audit. While reviewing configuration files and logs, you notice logs accepting POP3 traffic, but you do not see a rule allowing POP3 traffic in the Rule Base. Which of the following is the most likely cause?

Question206: Fill in the blank: A(n) _____ rule is created by an administrator and is located before the first and before last rules in the Rule Base.

Question207: In order to modify Security Policies the administrator can use which of the following tools? Select the BEST answer.

Question208: When Identity Awareness is enabled, which identity source(s) is(are) used for Application Control?

Question209: Jack works for a managed service provider and he has been tasked to create 17 new policies for several new customers. He does not have much time. What is the BEST way to do this with R80 security management?

Question210: You are using SmartView Tracker to troubleshoot NAT entries. Which column do you check to view the NAT'd source port if you are using Source NAT?

Question211: The organization's security manager wishes to back up just the Gaia operating system parameters. Which command can be used to back up only Gaia operating system parameters like interface details, Static routes and Proxy ARP entries?

Question212: How do you configure an alert in SmartView Monitor?

Question213: What are the three conflict resolution rules in the Threat Prevention Policy Layers?

Question214: Which of these attributes would be critical for a site-to-site VPN?

Question215: A client has created a new Gateway object that will be managed at a remote location. When the client attempts to install the Security Policy to the new Gateway object, the object does not appear in the Install On check box. What should you look for?

Question216: To optimize Rule Base efficiency the most hit rules should be where?

Question217: Which of these statements describes the Check Point ThreatCloud?

Question218: Which of the following is NOT an authentication scheme used for accounts created through SmartConsole?

Question219: In the Check Point Security Management Architecture, which component(s) can store logs?

Question220: Vanessa is a Firewall administrator. She wants to test a backup of her company's production Firewall cluster Dallas_GW. She has a lab environment that is identical to her production environment. She decided to restore production backup via SmartConsole in lab environment. Which details she need to fill in System Restore window before she can click OK button and test the backup?

Question221: VPN gateways must authenticate to each other prior to exchanging information. What are the two types of credentials used for authentication?

Question222: By default, which port does the WebUI listen on?

Question223: You are going to upgrade from R77 to R80. Before the upgrade, you want to back up the system so that, if there are any problems, you can easily restore to the old version with all configuration and management files intact. What is the BEST backup method in this scenario?

Question224: What action can be performed from SmartUpdate R77?

Question225: What is the default shell of Gaia CLI?

Question226: Which message indicates IKE Phase 2 has completed successfully?

Question227: Match the following commands to their correct function. Each command has one function only listed.

Question228: In which VPN community is a satellite VPN gateway not allowed to create a VPN tunnel with another satellite VPN gateway?

Question229: What are the steps to configure the HTTPS Inspection Policy?

Question230: Choose what BEST describes users on Gaia Platform.

Question231: Which policy type is used to enforce bandwidth and traffic control rules?

Question232: What is the Transport layer of the TCP/IP model responsible for?

Question233: Which of the following is NOT an element of VPN Simplified Mode and VPN Communities?

Question234: On R80.10 when configuring Third-Party devices to read the logs using the LEA (Log Export API) the default Log Server uses port:

Question235: How many users can have read/write access in Gaia at one time?

Question236: Fill in the blank: By default, the SIC certificates issued by R80 Management Server are based on the
____________ algorithm.

Question237: What protocol is specifically used for clustered environments?

Question238: What must a Security Administrator do to comply with a management requirement to log all traffic accepted through the perimeter Security Gateway?

Question239: Which of the following is NOT a VPN routing option available in a star community?

Question240: Fill in the blank: The _________ collects logs and sends them to the _________ .