EMT Practice Test

1. Question Content...

---

Question1: Fill in the blank: Back up and restores can be accomplished through_________.

Question2: Fill in the blank: Permanent VPN tunnels can be set on all tunnels in the community, on all tunnels for specific
gateways, or__________.

Question3: Which policy type is used to enforce bandwidth and traffic control rules?

Question4: What is the purpose of a Stealth Rule?

Question5: View the rule below. What does the lock-symbol in the left column mean? Select the BEST answer.

Question6: Which of the following uses the same key to decrypt as it does to encrypt?

Question7: Identify the API that is not supported by Check Point currently.

Question8: Office mode means that:

Question9: Which Threat Prevention Software Blade provides comprehensive against malicious and unwanted network
traffic, focusing on application and server vulnerabilities?

Question10: Which of the following methods can be used to update the trusted log server regarding the policy and
configuration changes performed on the Security Management Server?

Question11: Which one of the following is TRUE?

Question12: Fill in the blank: A new license should be generated and installed in all of the following situations EXCEPT
when ________.

Question13: Which feature is NOT provided by all Check Point Mobile Access solutions?

Question14: During the Check Point Stateful Inspection Process, for packets that do not pass Firewall Kernel Inspection
and are rejected by the rule definition, packets are:

Question15: Using R80 Smart Console, what does a "pencil icon" in a rule mean?

Question16: How Capsule Connect and Capsule Workspace differ?

Question17: Which Check Point feature enables application scanning and the detection?

Question18: Which authentication scheme requires a user to possess a token?

Question19: What does the "unknown" SIC status shown on SmartConsole mean?

Question20: Fill in the blank: To build an effective Security Policy, use a ________ and _______ rule.

Question21: In the Check Point Security Management Architecture, which component(s) can store logs?

Question22: Vanessa is firewall administrator in her company; her company is using Check Point firewalls on central and
remote locations, which are managed centrally by R80 Security Management Server. One central location has
an installed R77.30 Gateway on Open server. Remote location is using Check Point UTM-1 570 series
appliance with R71. Which encryption is used in Secure Internal Communication (SIC) between central
management and firewall on each location?

Question23: What are the steps to configure the HTTPS Inspection Policy?

Question24: You have created a rule at the top of your Rule Base to permit Guest Wireless access to the Internet. However,
when guest users attempt to reach the Internet, they are not seeing the splash page to accept your Terms of
Service, and cannot access the Internet. How can you fix this?

Question25: What CLI utility allows an administrator to capture traffic along the firewall inspection chain?

Question26: True or False: In a Distributed Environment, a Central License can be installed via CLI on a Security Gateway

Question27: Look at the following screenshot and select the BEST answer.

Question28: Which of the completed statements is NOT true? The WebUI can be used to manage user accounts and:

Question29: Identify the ports to which the Client Authentication daemon listens on by default?

Question30: Which information is included in the "Extended Log" tracking option, but is not included in the "Log"
tracking option?

Question31: Fill in the blanks: In the Network policy layer, the default action for the Implied last rule is ________ all
traffic. However, in the Application Control policy layer, the default action is ________ all traffic.

Question32: You have enabled "Full Log" as a tracking option to a security rule. However, you are still not seeing any data
type information. What is the MOST likely reason?

Question33: What are the advantages of a "shared policy" in R80?

Question34: When using LDAP as an authentication method for Identity Awareness, the query:

Question35: MyCorp has the following NAT rules. You need to disable the NAT function when Alpha-internal networks
try to reach the Google DNS (8.8.8.8) server.
What can you do in this case?

Question36: Which utility shows the security gateway general system information statistics like operating system
information and resource usage, and individual software blade statistics of VPN, Identity Awareness and
DLP?

Question37: Which SmartConsole tab shows logs and detects security threats, providing a centralized display of potential
attack patterns from all network devices?

Question38: Provide very wide coverage for all products and protocols, with noticeable performance impact.

How could you tune the profile in order to lower the CPU load still maintaining security at good level? Select
the BEST answer.

Question39: The WebUI offers three methods for downloading Hotfixes via CPUSE. One of them is Automatic method.
How many times per day will CPUSE agent check for hotfixes and automatically download them?

Question40: How many layers make up the TCP/IP model?

Question41: Which tool is used to enable cluster membership on a Gateway?

Question42: By default, which port does the WebUI listen on?

Question43: Look at the screenshot below. What CLISH command provides this output?

Question44: Which of the following is NOT an attribute of packer acceleration?

Question45: Which of the following is NOT a valid application navigation tab in the R80 SmartConsole?

Question46: Vanessa is a Firewall administrator. She wants to test a backup of her company's production Firewall cluster
Dallas_GW. She has a lab environment that is identical to her production environment. She decided to restore
production backup via SmartConsole in lab environment. Which details she need to fill in System Restore
window before she can click OK button and test the backup?

Question47: You want to reset SIC between smberlin and sgosaka.

In SmartDashboard, you choose sgosaka, Communication, Reset. On sgosaka, you start cpconfig, choose
Secure Internal Communication and enter the new SIC Activation Key. The screen reads The SIC was
successfully initialized and jumps back to the menu. When trying to establish a connection, instead of a
working connection, you receive this error message:

What is the reason for this behavior?

Question48: To view the policy installation history for each gateway, which tool would an administrator use?

Question49: Which is the correct order of a log flow processed by SmartEvent components:

Question50: Which of these attributes would be critical for a site-to-site VPN?

Question51: What are the three deployment considerations for a secure network?

Question52: What are the three tabs available in SmartView Tracker?

Question53: What are the two high availability modes?

Question54: What are the two types of NAT supported by the Security Gateway?

Question55: You have discovered suspicious activity in your network. What is the BEST immediate action to take?

Question56: Which SmartConsole tab is used to monitor network and security performance?

Question57: Fill in the blank: The tool _______ generates a R80 Security Gateway configuration report.

Question58: You are the Check Point administrator for Alpha Corp. You received a call that one of the users is unable to
browse the Internet on their new tablet which is connected to the company wireless, which goes through a
Check Point Gateway. How would you review the logs to see what is blocking this traffic?

Question59: You have just installed your Gateway and want to analyze the packet size distribution of your traffic with
SmartView Monitor.

Unfortunately, you get the message:
"There are no machines that contain Firewall Blade and SmartView Monitor".
What should you do to analyze the packet size distribution of your traffic? Give the BEST answer.

Question60: Which tool CANNOT be launched from SmartUpdate R77?

Question61: According to Check Point Best Practice, when adding a 3rd party gateway to a Check Point security solution
what object SHOULD be added? A(n):

Question62: What happens when you run the command: fw sam -J src [Source IP Address]?

Question63: You believe Phase 2 negotiations are failing while you are attempting to configure a site-to-site VPN with one
of your firm's business partners. Which SmartConsole application should you use to confirm your suspicious?

Question64: At what point is the Internal Certificate Authority (ICA) created?

Question65: R80 is supported by which of the following operating systems:

Question66: Which Check Point software blade provides visibility of users, groups and machines while also providing
access control through identity-based policies?

Question67: What licensing feature is used to verify licenses and activate new licenses added to the License and Contracts
repository?

Question68: Which option, when applied to a rule, allows all encrypted and non-VPN traffic that matches the rule?

Question69: Fill in the blank: The R80 feature ________ permits blocking specific IP addresses for a specified time period.

Question70: Katie has been asked to do a backup on the Blue Security Gateway. Which command would accomplish this in
the Gaia CLI?

Question71: When should you generate new licenses?

Question72: In which VPN community is a satellite VPN gateway not allowed to create a VPN tunnel with another satellite
VPN gateway?

Question73: How do you manage Gaia?

Question74: Joey wants to configure NTP on R80 Security Management Server. He decided to do this via WebUI. What is
the correct address to access the Web UI for Gaia platform via browser?

Question75: What SmartEvent component creates events?

Question76: When you upload a package or license to the appropriate repository in SmartUpdate, where is the package or
license stored

Question77: Which is NOT an encryption algorithm that can be used in an IPSEC Security Association (Phase 2)?

Question78: You are about to test some rule and object changes suggested in an R77 news group. Which backup solution
should you use to ensure the easiest restoration of your Security Policy to its previous configuration after
testing the changes?

Question79: What action can be performed from SmartUpdate R77?

Question80: Which of the following is NOT a set of Regulatory Requirements related to Information Security?

Question81: Where do we need to reset the SIC on a gateway object?

Question82: How are the backups stored in Check Point appliances?

Question83: Which of the following is NOT an alert option?

Question84: When using GAiA, it might be necessary to temporarily change the MAC address of the interface eth 0 to
00:0C:29:12:34:56. After restarting the network the old MAC address should be active. How do you configure
this change?

Question85: Fill in the blank: The _________ software blade enables Application Security policies to allow, block, or limit
website access based on user, group, and machine identities.

Question86: Fill in the blank: The R80 SmartConsole, SmartEvent GUI client, and _______ consolidate billions of logs and
shows them as prioritized security events.

Question87: Which NAT rules are prioritized first?

Question88: What is the purpose of the Stealth Rule?

Question89: Phase 1 of the two-phase negotiation process conducted by IKE operates in ______ mode.

Question90: Fill in the blank: ________information is included in the "Full Log" tracking option, but is not included in the
"Log" tracking option?

Question91: Customer's R80 management server needs to be upgraded to R80.10. What is the best upgrade method when
the management server is not connected to the Internet?

Question92: You find that Users are not prompted for authentication when they access their Web servers, even though you
have created an HTTP rule via User Authentication. Choose the BEST reason why.

Question93: After the initial installation on Check Point appliance, you notice that the Management interface and default
gateway are incorrect. Which commands could you use to set the IP to 192.168.80.200/24 and default gateway
to 192.168.80.1.

Question94: ABC Corp., and have recently returned from a training course on Check Point's new advanced R80
management platform. You are presenting an in-house R80 Management to the other administrators in ABC
Corp.

How will you describe the new "Publish" button in R80 Management Console?

Question95: Which rule is responsible for the user authentication failure?

Question96: Fill in the blanks: Default port numbers for an LDAP server is ______ for standard connections and _______
SSL connections.

Question97: Can multiple administrators connect to a Security Management Server at the same time?

Question98: Fill in the blank: When tunnel test packets no longer invoke a response, SmartView Monitor displays
_____________ for the given VPN tunnel.

Question99: What Identity Agent allows packet tagging and computer authentication?

Question100: When configuring Spoof Tracking, which tracking actions can an administrator select to be done when
spoofed packets are detected?

Question101: What are the three components for Check Point Capsule?

Question102: One of major features in R80 SmartConsole is concurrent administration. Which of the following is NOT
possible considering that AdminA, AdminB, and AdminC are editing the same Security Policy?

Question103: What is the command to see cluster status in cli expert mode?

Question104: In which deployment is the security management server and Security Gateway installed on the same
appliance?

Question105: In SmartEvent, what are the different types of automatic reactions that the administrator can configure?

Question106: There are 4 ways to use the Management API for creating host object with R80 Management API. Which one
is NOT correct?

Question107: What happens if the identity of a user is known?

Question108: Consider the Global Properties following settings:

The selected option "Accept Domain Name over UDP (Queries)" means:

Question109: Which Threat Prevention Software Blade provides protection from malicious software that can infect your
network computers?

Question110: Where can administrator edit a list of trusted SmartConsole clients in R80?