EMT Practice Test

1. Question Content...

---

Question1: Which of the following type of authentication on Mobile Access can NOT be used as the first authentication method?

Question2: Full synchronization between cluster members is handled by Firewall Kernel. Which port is used for this?

Question3: Which one of these features is NOT associated with the Check Point URL Filtering and Application Control Blade?

Question4: Which is NOT an example of a Check Point API?

Question5: The Security Gateway is installed on GAIA R80. The default port for the Web User interface is ______.

Question6: If you needed the Multicast MAC address of a cluster, what command would you run?

Question7: Fill in the blank: The R80 feature ______ permits blocking specific IP addresses for a specific time period.

Question8: Fill in the blank: The R80 utility fw monitoris used to troubleshoot ________.

Question9: What happen when IPS profile is set in Detect Only Mode for troubleshooting?

Question10: What is not a component of Check Point SandBlast?

Question11: What are the three components for Check Point Capsule?

Question12: The Event List within the Event tab contains:

Question13: In order to get info about assignment (FW, SND) of all CPUs in your SGW, what is the most accurate CLI command?

Question14: Check Pont Central Deployment Tool (CDT) communicates with the Security Gateway / Cluster Members over Check Point SIC _____________ .

Question15: Which is the least ideal Synchronization Status for Security Management Server High Availability deployment?

Question16: What is the mechanism behind Threat Extraction?

Question17: fwssd is a child process of which of the following Check Point daemons?

Question18: Which of the SecureXL templates are enabled by default on Security Gateway?

Question19: The Firewall kernel is replicated multiple times, therefore:

Question20: Advanced Security Checkups can be easily conducted within:

Question21: Selecting an event displays its configurable properties in the Detail pane and a description of the event in the Description pane. Which is NOT an option to adjust or configure?

Question22: To fully enable Dynamic Dispatcher with Firewall Priority Queues on a Security Gateway, run the following command in Expert mode then reboot:

Question23: Which statement is true regarding redundancy?

Question24: Where you can see and search records of action done by R80 SmartConsole administrators?

Question25: Which of the following statements is TRUE about R80 management plug-ins?

Question26: Which statement is NOT TRUE about Delta synchronization?

Question27: Connections to the Check Point R80 Web API use what protocol?

Question28: In a Client to Server scenario, which represents that the packet has already checked against the tables and the Rule Base?

Question29: Which command lists all tables in Gaia?

Question30: Which of the following is a new R80.10 Gateway feature that had not been available in R77.X and older?

Question31: In R80.10, how do you manage your Mobile Access Policy?

Question32: What is true about the IPS-Blade?

Question33: What Factor preclude Secure XL Templating?

Question34: Which command can you use to verify the number of active concurrent connections?

Question35: Check Point Management (cpm) is the main management process in that it provides the architecture for a consolidated management console. It empowers the migration from legacy Client-side logic to Server-side logic. The cpm process:

Question36: NAT rules are prioritized in which order?
1. Automatic Static NAT
2. Automatic Hide NAT
3. Manual/Pre-Automatic NAT
4. Post-Automatic/Manual NAT rules

Question37: Which view is NOT a valid CPVIEW view?

Question38: The CPD daemon is a Firewall Kernel Process that does NOT do which of the following?

Question39: How can SmartView application accessed?

Question40: In R80 spoofing is defined as a method of:

Question41: CPM process stores objects, policies, users, administrators, licenses and management data in a database.
The database is:

Question42: Which statement is correct about the Sticky Decision Function?

Question43: Fill in the blank: The command ___________ provides the most complete restoration of a R80 configuration.

Question44: What is a feature that enables VPN connections to successfully maintain a private and secure VPN session without employing Stateful Inspection?

Question45: Which of the following Check Point processes within the Security Management Server is responsible for the receiving of log records from Security Gateway?

Question46: What is true about VRRP implementations?

Question47: During inspection of your Threat Prevention logs you find four different computers having one event each with a Critical Severity. Which of those hosts should you try to remediate first?

Question48: You want to gather and analyze threats to your mobile device. It has to be a lightweight app. Which application would you use?

Question49: What command verifies that the API server is responding?

Question50: R80.10 management server can manage gateways with which versions installed?

Question51: Sticky Decision Function (SDF) is required to prevent which of the following? Assume you set up an Active-Active cluster.