EMT Practice Test

1. Question Content...

---

Question1: The organization's security manager wishes to back up just the Gaia operating system parameters. Which command can be used to back up only Gaia operating system parameters like interface details, Static routes and Proxy ARP entries?

Question2: In which scenario is it a valid option to transfer a license from one hardware device to another?

Question3: After trust has been established between the Check Point components, what is TRUE about name and IP- address changes?

Question4: To fully enable Dynamic Dispatcher on a Security Gateway:

Question5: What statement is true regarding Visitor Mode?

Question6: What are the three deployment considerations for a secure network?

Question7: Katie has been asked to do a backup on the Blue Security Gateway. Which command would accomplish this in the Gaia CLI?

Question8: Which is a suitable command to check whether Drop Templates are activated or not?

Question9: Tom has connected to the R80 Management Server remotely using SmartConsole and is in the process of making some Rule Base changes, when he suddenly loses connectivity. Connectivity is restored shortly afterward. What will happen to the changes already made:

Question10: Where does the security administrator activate Identity Awareness within SmartDashboard?

Question11: Administrator wishes to update IPS from SmartConsole by clicking on the option "update now" under the IPS tab. Which device requires internet access for the update to work?

Question12: What is the purpose of the Clean-up Rule?

Question13: Which command can you use to verify the number of active concurrent connections?

Question14: The IPS policy for pre-R80 gateways is installed during the _______ .

Question15: What port is used for delivering logs from the gateway to the management server?

Question16: What is UserCheck?

Question17: When using LDAP as an authentication method for Identity Awareness, the query:

Question18: Which of the following blades is NOT subscription-based and therefore does not have to be renewed on a regular basis?

Question19: In the Network policy layer, the default action for the Implied last rule is ________ all traffic. However, in the Application Control policy layer, the default action is ________ all traffic.

Question20: Which tool is used to enable ClusterXL?

Question21: John Adams is an HR partner in the ACME organization. ACME IT wants to limit access to HR servers to designated IP addresses to minimize malware infection and unauthorized access risks. Thus, gateway policy permits access only from Join's desktop which is assigned an IP address 10.0.0.19 via DHCP.
John received a laptop and wants to access the HR Web Server from anywhere in the organization. The IT department gave the laptop a static IP address, but the limits him to operating it only from his desk. The current Rule Base contains a rule that lets John Adams access the HR Web Server from his laptop. He wants to move around the organization and continue to have access to the HR Web Server.
To make this scenario work, the IT administrator:
1) Enables Identity Awareness on a gateway, selects AD Query as one of the Identity Sources.
2) Adds an access role object to the Firewall Rule Base that lets John Adams PC access the HR Web Server from any machine and from any location.
John plugged in his laptop to the network on a different network segment and he is not able to connect. How does he solve this problem?

Question22: Which command shows the installed licenses?

Question23: What are the three types of UserCheck messages?

Question24: When a Security Gateways sends its logs to an IP address other than its own, which deployment option is installed?

Question25: Which of the following is NOT a license activation method?

Question26: What are the three authentication methods for SIC?

Question27: What is also referred to as Dynamic NAT?

Question28: Vanessa is attempting to log into the Gaia Web Portal. She is able to login successfully. Then she tries the same username and password for SmartConsole but gets the message in the screenshot image below. She has checked that the IP address of the Server is correct and the username and password she used to login into Gaia is also correct.

What is the most likely reason?

Question29: What CLI utility allows an administrator to capture traffic along the firewall inspection chain?

Question30: How would you determine the software version from the CLI?

Question31: Jennifer McHanry is CEO of ACME. She recently bought her own personal iPad. She wants use her iPad to access the internal Finance Web server. Because the iPad is not a member of the Active Directory domain, she cannot identify seamlessly with AD Query. However, she can enter her AD credentials in the Captive Portal and then get the same access as on her office computer. Her access to resources is based on rules in the R77 Firewall Rule Base.
To make this scenario work, the IT administrator must:
1) Enable Identity Awareness on a gateway and select Captive Portal as one of the Identity Sources.
2) In the Portal Settings window in the User Access section, make sure that Name and password login is selected.
3) Create a new rule in the Firewall Rule Base to let Jennifer McHanry access network destinations. Select accept as the Action.
4) Install policy.
Ms McHanry tries to access the resource but is unable. What should she do?

Question32: You want to store the GAiA configuration in a file for later reference. What command should you use?

Question33: How Capsule Connect and Capsule Workspace differ?

Question34: You believe Phase 2 negotiations are failing while you are attempting to configure a site-to-site VPN with one of your firm's business partners. Which SmartConsole application should you use to confirm your suspicious?

Question35: What is the potential downside or drawback to choosing the Standalone deployment option instead of the Distributed deployment option?

Question36: What is the Transport layer of the TCP/IP model responsible for?

Question37: Using R80 Smart Console, what does a "pencil icon" in a rule mean?

Question38: Which of the following is NOT a role of the SmartCenter:

Question39: What does the "unknown" SIC status shown on SmartConsole mean?

Question40: Which option would allow you to make a backup copy of the OS and Check Point configuration, without stopping Check Point processes?

Question41: Choose what BEST describes a Session.

Question42: John is using Management HA. Which Smartcenter should be connected to for making changes?

Question43: Which of these components does NOT require a Security Gateway R77 license?

Question44: Vanessa is a Firewall administrator. She wants to test a backup of her company's production Firewall cluster Dallas_GW. She has a lab environment that is identical to her production environment. She decided to restore production backup via SmartConsole in lab environment. Which details she need to fill in System Restore window before she can click OK button and test the backup?

Question45: Office mode means that:

Question46: What is the best sync method in the ClusterXL deployment?

Question47: Which of the following commands is used to verify license installation?

Question48: An LDAP server holds one or more ______________.

Question49: Kofi, the administrator of the ALPHA Corp network wishes to change the default Gaia WebUI Portal port number currently set on the default HTTPS port. Which CLISH commands are required to be able to change this TCP port?

Question50: Which of the following are types of VPN communities?

Question51: What is the SOLR database for?

Question52: A _________ VPN deployment is used to provide remote users with secure access to internal corporate resources by authenticating the user through an internet browser.

Question53: The Application Layer Firewalls inspect traffic through the ________ layer(s) of the TCP/IP model and up to and including the ________ layer.

Question54: Using ClusterXL, what statement is true about the Sticky Decision Function?

Question55: Which of the following actions do NOT take place in IKE Phase 1?

Question56: Your bank's distributed R77 installation has Security Gateways up for renewal. Which SmartConsole application will tell you which Security Gateways have licenses that will expire within the next 30 days?

Question57: Vanessa is expecting a very important Security Report. The Document should be sent as an attachment via e-mail. An e-mail with Security_report.pdf file was delivered to her e-mail inbox. When she opened the PDF file, she noticed that the file is basically empty and only few lines of text are in it. The report is missing some graphs, tables and links. Which component of SandBlast protection is her company using on a Gateway?

Question58: After the initial installation on Check Point appliance, you notice that the Management interface and default gateway are incorrect. Which commands could you use to set the IP to 192.168.80.200/24 and default gateway to 192.168.80.1.

Question59: Packet acceleration (SecureXL) identifies connections by several attributes. Which of the attributes is NOT used for identifying connection?

Question60: Permanent VPN tunnels can be set on all tunnels in the community, on all tunnels for specific gateways, or__________.

Question61: The CPD daemon is a Firewall Kernel Process that does NOT do which of the following?

Question62: Which type of the Check Point license ties the package license to the IP address of the Security Management Server?

Question63: Packages and licenses are loaded from all of these sources EXCEPT

Question64: Which Check Point software blade provides Application Security and identity control?

Question65: What are types of Check Point APIs available currently as part of R80.10 code?

Question66: Provide very wide coverage for all products and protocols, with noticeable performance impact.

How could you tune the profile in order to lower the CPU load still maintaining security at good level? Select the BEST answer.

Question67: You have configured SNX on the Security Gateway. The client connects to the Security Gateway and the user enters the authentication credentials. What must happen after authentication that allows the client to connect to the Security Gateway's VPN domain?

Question68: Fill in the bank: In Office mode, a Security Gateway assigns a remote client to an IP address once___________.

Question69: You want to establish a VPN, using certificates. Your VPN will exchange certificates with an external partner. Which of the following activities sh you do first?

Question70: Service blades must be attached to a ______________.

Question71: RADIUS protocol uses ______ to communicate with the gateway.

Question72: Choose what BEST describes the Policy Layer Traffic Inspection.

Question73: A High Availability deployment is referred to as a ______ cluster and a Load Sharing deployment is referred to as a ________ cluster.

Question74: Can a Check Point gateway translate both source IP address and destination IP address in a given packet?

Question75: What is the Manual Client Authentication TELNET port?

Question76: Which of the following is NOT a component of Check Point Capsule?

Question77: Sticky Decision Function (SDF) is required to prevent which of the following? Assume you set up an Active-Active cluster.

Question78: Which Threat Prevention Software Blade provides comprehensive against malicious and unwanted network traffic, focusing on application and server vulnerabilities?

Question79: What is the mechanism behind Threat Extraction?

Question80: Which two of these Check Point Protocols are used by ?