EMT Practice Test

1. Question Content...

---

Question1: Fill in the blank: An identity server uses a __________ for user authentication.

Question2: Choose the correct syntax to add a new host named "emailserver1" with IP address 10.50.23.90 using GAiA Management CLI?

Question3: Bob is asked by Alice to disable the SecureXL mechanism temporary tor further diagnostic by their Check Point partner. Which of the following Check Point Command is true:

Question4: Which feature is NOT provided by all Check Point Mobile Access solutions?

Question5: What is the Implicit Clean-up Rule?

Question6: What kind of information would you expect to see using the sim affinity command?

Question7: Which Check Point software blades could be enforced under Threat Prevention profile using Check Point R81.10 SmartConsole application?

Question8: Which statements below are CORRECT regarding Threat Prevention profiles in SmartDashboard?

Question9: If the Active Security Management Server fails or if it becomes necessary to change the Active to Standby, the following steps must be taken to prevent data loss. Providing the Active Security Management Server is responsive, which if these steps should NOT be performed:

Question10: Which NAT rules are prioritized first?

Question11: What are the main stages of a policy installations?

Question12: Which VPN routing option uses VPN routing for every connection a satellite gateway handles?

Question13: You noticed that CPU cores on the Security Gateway are usually 100% utilized and many packets were dropped. You don't have a budget to perform a hardware upgrade at this time. To optimize drops you decide to use Priority Queues and fully enable Dynamic Dispatcher. How can you enable them?

Question14: Which features are only supported with R81.10 Gateways but not R77.x?

Question15: Which of the following statements is TRUE about R81 management plug-ins?

Question16: You want to store the GAIA configuration in a file for later reference. What command should you use?

Question17: What is a feature that enables VPN connections to successfully maintain a private and secure VPN session without employing Stateful Inspection?

Question18: Using mgmt_cli, what is the correct syntax to import a host object called Server_1 from the CLI?

Question19: Due to high CPU workload on the Security Gateway, the security administrator decided to purchase a new multicore CPU to replace the existing single core CPU. After installation, is the administrator required to perform any additional tasks?

Question20: In SmartConsole, objects are used to represent physical and virtual network components and also some logical components. These objects are divided into several categories. Which of the following is NOT an objects category?

Question21: What a valid SecureXL paths in R81.10?

Question22: Within the Check Point Firewall Kernel resides Chain Modules, which are individually responsible for the inspection of a specific blade or feature that has been enabled in the configuration of the gateway. For Wire mode configuration, chain modules marked with _______ will not apply.

Question23: What is considered Hybrid Emulation Mode?

Question24: D18912E1457D5D1DDCBD40AB3BF70D5D
The system administrator of a company is trying to find out why acceleration is not working for the traffic. The traffic is allowed according to the rule based and checked for viruses. But it is not accelerated. What is the most likely reason that the traffic is not accelerated?

Question25: Please choose correct command to add an "emailserver1" host with IP address 10.50.23.90 using GAiA management CLI?

Question26: Which one of the following is NOT a configurable Compliance Regulation?

Question27: You are investigating issues with to gateway cluster members are not able to establish the first initial cluster synchronization. What service is used by the FWD daemon to do a Full Synchronization?

Question28: What is true about the IPS-Blade?

Question29: What is the default shell for the command line interface?

Question30: Which method below is NOT one of the ways to communicate using the Management API's?

Question31: Secure Configuration Verification (SCV), makes sure that remote access client computers are configured in accordance with the enterprise Security Policy. Bob was asked by Alice to implement a specific SCV configuration but therefore Bob needs to edit and configure a specific Check Point file. Which location file and directory is true?

Question32: One of major features in R81 SmartConsole is concurrent administration.
Which of the following is NOT possible considering that AdminA, AdminB and AdminC are editing the same Security Policy?

Question33: John is using Management HA. Which Security Management Server should he use for making changes?

Question34: When requiring certificates for mobile devices, make sure the authentication method is set to one of the following, Username and Password, RADIUS or ________.

Question35: When attempting to start a VPN tunnel, in the logs the error "no proposal chosen" is seen numerous times. No other VPN-related entries are present.
Which phase of the VPN negotiations has failed?

Question36: You want to verify if your management server is ready to upgrade to R81.10. What tool could you use in this process?

Question37: Which one of these features is NOT associated with the Check Point URL Filtering and Application Control Blade?

Question38: What destination versions are supported for a Multi-Version Cluster Upgrade?

Question39: The WebUI offers several methods for downloading hotfixes via CPUSE except:

Question40: Which command would you use to set the network interfaces' affinity in Manual mode?

Question41: What is the best sync method in the ClusterXL deployment?

Question42: Fill in the blank: The IPS policy for pre-R81 gateways is installed during the _______ .

Question43: When users connect to the Mobile Access portal they are unable to open File Shares.
Which log file would you want to examine?

Question44: When a packet arrives at the gateway, the gateway checks it against the rules in the hop Policy Layer, sequentially from top to bottom, and enforces the first rule that matches a packet. Which of the following statements about the order of rule enforcement is true?

Question45: When deploying SandBlast, how would a Threat Emulation appliance benefit from the integration of ThreatCloud?

Question46: Automation and Orchestration differ in that:

Question47: John is using Management HA. Which Smartcenter should be connected to for making changes?

Question48: What is UserCheck?

Question49: What is the limitation of employing Sticky Decision Function?

Question50: Which of these is an implicit MEP option?

Question51: VPN Link Selection will perform the following when the primary VPN link goes down?

Question52: A user complains that some Internet resources are not available. The Administrator is having issues seeing it packets are being dropped at the firewall (not seeing drops in logs). What is the solution to troubleshoot the issue?

Question53: Which of the following processes pulls the application monitoring status from gateways?

Question54: Which is NOT an example of a Check Point API?

Question55: Session unique identifiers are passed to the web api using which http header option?

Question56: What are the modes of SandBlast Threat Emulation deployment?

Question57: What does the Log "Views" tab show when SmartEvent is Correlating events?

Question58: What key is used to save the current CPView page in a filename format cpview_"cpview process ID".cap"number of captures"?

Question59: Which of the following is NOT a VPN routing option available in a star community?

Question60: How many layers make up the TCP/IP model?

Question61: What will SmartEvent automatically define as events?

Question62: What is the best method to upgrade a Security Management Server to R81.x when it is not connected to the Internet?

Question63: Which command lists firewall chain?

Question64: Which view is NOT a valid CPVIEW view?

Question65: CoreXL is supported when one of the following features is enabled:

Question66: What is mandatory for ClusterXL to work properly?

Question67: Sieve is a Cyber Security Engineer working for Global Bank with a large scale deployment of Check Point Enterprise Appliances Steve's manager. Diana asks him to provide firewall connection table details from one of the firewalls for which he is responsible. Which of these commands may impact performance briefly and should not be used during heavy traffic times of day?

Question68: Which TCP port does the CPM process listen on?

Question69: You want to gather and analyze threats to your mobile device. It has to be a lightweight app. Which application would you use?

Question70: Which software blade does NOT accompany the Threat Prevention policy?

Question71: What is Dynamic Balancing?

Question72: Which Remote Access Client does not provide an Office-Mode Address?

Question73: You want to allow your Mobile Access Users to connect to an internal file share. Adding the Mobile Application 'File Share' to your Access Control Policy in the SmartConsole didn't work. You will be only allowed to select Services for the 'Service & Application' column How to fix it?

Question74: After having saved the Clish Configuration with the "save configuration config.txt" command, where can you find the config.txt file?

Question75: How many users can have read/write access in Gaia at one time?

Question76: Which of the following authentication methods ARE NOT used for Mobile Access?

Question77: Both ClusterXL and VRRP are fully supported by Gaia R81.10 and available to all Check Point appliances. Which the following command is NOT related to redundancy and functions?

Question78: How does the Anti-Virus feature of the Threat Prevention policy block traffic from infected websites?

Question79: Which two of these Check Point Protocols are used by SmartEvent Processes?

Question80: In which formats can Threat Emulation forensics reports be viewed in?

Question81: What mechanism can ensure that the Security Gateway can communicate with the Management Server with ease in situations with overwhelmed network resources?

Question82: Can Check Point and Third-party Gateways establish a certificate-based Site-to-Site VPN tunnel?

Question83: GAiA Software update packages can be imported and installed offline in situation where:

Question84: Which command lists all tables in Gaia?

Question85: You need to change the number of firewall Instances used by CoreXL. How can you achieve this goal?

Question86: The Compliance Blade allows you to search for text strings in many windows and panes, to search for a value in a field, what would your syntax be?

Question87: What is false regarding a Management HA environment?

Question88: Which process is used mainly for backward compatibility of gateways in R81.X? It provides communication with GUI-client, database manipulation, policy compilation and Management HA synchronization.

Question89: You have a Gateway is running with 2 cores. You plan to add a second gateway to build a cluster and used a device with 4 cores.
How many cores can be used in a Cluster for Firewall-kernel on the new device?

Question90: Which packet info is ignored with Session Rate Acceleration?

Question91: In which VPN community is a satellite VPN gateway not allowed to create a VPN tunnel with another satellite VPN gateway?

Question92: Which encryption algorithm is the least secured?

Question93: What are the steps to configure the HTTPS Inspection Policy?

Question94: What is the responsibility of SOLR process on R81.10 management server?

Question95: You had setup the VPN Community VPN-Stores'with 3 gateways. There are some issues with one remote gateway(1.1.1.1) and an your local gateway. What will be the best log filter to see only the IKE Phase 2 agreed networks for both gateways

Question96: How often does Threat Emulation download packages by default?

Question97: To ensure that VMAC mode is enabled, which CLI command should you run on all cluster members?

Question98: What is the order of NAT priorities?

Question99: In R81 spoofing is defined as a method of:

Question100: Connections to the Check Point R81 Web API use what protocol?

Question101: The Correlation Unit performs all but the following actions:

Question102: What is not a component of Check Point SandBlast?

Question103: What two ordered layers make up the Access Control Policy Layer?

Question104: In terms of Order Rule Enforcement, when a packet arrives at the gateway, the gateway checks it against the rules in the top Policy Layer, sequentially from top to bottom Which of the following statements is correct?

Question105: Which command is used to obtain the configuration lock in Gaia?

Question106: The Check Point history feature in R81 provides the following:

Question107: John detected high load on sync interface. Which is most recommended solution?

Question108: Fill in the blank. Once a certificate is revoked from the Security Gateway by the Security Management Server, the certificate information is ________ .

Question109: When Dynamic Dispatcher is enabled, connections are assigned dynamically with the exception of:

Question110: Which tool is used to enable ClusterXL?

Question111: You are the administrator for ABC Corp. You have logged into your R81 Management server. You are making some changes in the Rule Base and notice that rule No.6 has a pencil icon next to it.

What does this mean?

Question112: Firewall polices must be configured to accept VRRP packets on the GAiA platform if it Firewall software. The Multicast destination assigned by the internet Assigned Number Authority (IANA) for VRRP is:

Question113: Which of the following Check Point processes within the Security Management Server is responsible for the receiving of log records from Security Gateway?

Question114: SmartConsole R81 requires the following ports to be open for SmartEvent R81 management:

Question115: When an encrypted packet is decrypted, where does this happen?

Question116: fwssd is a child process of which of the following Check Point daemons?

Question117: To find records in the logs that shows log records from the Application & URL Filtering Software Blade where traffic was dropped, what would be the query syntax?

Question118: You can select the file types that are sent for emulation for all the Threat Prevention profiles. Each profile defines a(n) _____ or _____ action for the file types.

Question119: Check Point Management (cpm) is the main management process in that it provides the architecture for a consolidates management console. CPM allows the GUI client and management server to communicate via web services using ___________.

Question120: What is the command to check the status of the SmartEvent Correlation Unit?

Question121: What information is NOT collected from a Security Gateway in a Cpinfo?

Question122: Which command shows the current Security Gateway Firewall chain?

Question123: Which command shows only the table names of all kernel tables?

Question124: What solution is Multi-queue intended to provide?

Question125: What statement best describes the Proxy ARP feature for Manual NAT in R81.10?

Question126: As a valid Mobile Access Method, what feature provides Capsule Connect/VPN?

Question127: The SmartEvent R81 Web application for real-time event monitoring is called:

Question128: What needs to be configured if the NAT property 'Translate destination or client side' is not enabled in Global Properties?

Question129: Which options are given on features, when editing a Role on Gaia Platform?

Question130: In order to get info about assignment (FW, SND) of all CPUs in your SGW, what is the most accurate CLI command?

Question131: What is true of the API server on R81.10?

Question132: How do Capsule Connect and Capsule Workspace differ?

Question133: Can multiple administrators connect to a Security Management Server at the same time?

Question134: Using Threat Emulation technologies, what is the best way to block .exe and .bat file types?

Question135: The fwd process on the Security Gateway sends logs to the fwd process on the Management Server via which 2 processes?

Question136: Which firewall daemon is responsible for the FW CLI commands?

Question137: Which of the following technologies extracts detailed information from packets and stores that information in state tables?

Question138: Office mode means that:

Question139: You can access the ThreatCloud Repository from:

Question140: Which GUI client is supported in R81?

Question141: Fill in the blanks. There are ________ types of software containers: ___________.

Question142: Which one of the following is true about Threat Emulation?

Question143: Which of the completed statements is NOT true? The WebUI can be used to manage user accounts and:

Question144: SmartEvent Security Checkups can be run from the following Logs and Monitor activity:

Question145: When running a query on your logs, to find records for user Toni with machine IP of 10.0.4.210 but exclude her tablet IP of 10.0.4.76, which of the following query syntax would you use?

Question146: What is the difference between SSL VPN and IPSec VPN?

Question147: What is the purpose of the CPCA process?

Question148: What are the attributes that SecureXL will check after the connection is allowed by Security Policy?

Question149: What is the difference between an event and a log?

Question150: During inspection of your Threat Prevention logs you find four different computers having one event each with a Critical Severity. Which of those hosts should you try to remediate first?

Question151: What is the most ideal Synchronization Status for Security Management Server High Availability deployment?

Question152: Using ClusterXL, what statement is true about the Sticky Decision Function?

Question153: What is the name of the secure application for Mail/Calendar for mobile devices?

Question154: Which statement is NOT TRUE about Delta synchronization?

Question155: The following command is used to verify the CPUSE version:

Question156: Vanessa is a Firewall administrator. She wants to test a backup of her company's production Firewall cluster Dallas_GW. She has a lab environment that is identical to her production environment. She decided to restore production backup via SmartConsole in lab environment.
Which details she need to fill in System Restore window before she can click OK button and test the backup?

Question157: Which web services protocol is used to communicate to the Check Point R81 Identity Awareness Web API?

Question158: In the Check Point Firewall Kernel Module, each Kernel is associated with a key, which specifies the type of traffic applicable to the chain module. For Stateful Mode configuration, chain modules marked with __________________ will not apply.

Question159: Which of the following blades is NOT subscription-based and therefore does not have to be renewed on a regular basis?

Question160: Under which file is the proxy arp configuration stored?

Question161: By default, the R81 web API uses which content-type in its response?

Question162: Which of the following is an identity acquisition method that allows a Security Gateway to identify Active Directory users and computers?

Question163: Which Check Point feature enables application scanning and the detection?

Question164: After trust has been established between the Check Point components, what is TRUE about name and IP-address changes?

Question165: After making modifications to the $CVPNDIR/conf/cvpnd.C file, how would you restart the daemon?

Question166: Which 3 types of tracking are available for Threat Prevention Policy?

Question167: With MTA (Mail Transfer Agent) enabled the gateways manages SMTP traffic and holds external email with potentially malicious attachments. What is required in order to enable MTA (Mail Transfer Agent) functionality in the Security Gateway?

Question168: What is the least amount of CPU cores required to enable CoreXL?

Question169: Fill in the blank: Browser-based Authentication sends users to a web page to acquire identities using ________ .

Question170: Which command can you use to enable or disable multi-queue per interface?

Question171: If a "ping"-packet is dropped by FW1 Policy -on how many inspection Points do you see this packet in "fw monitor"?

Question172: What is true about VRRP implementations?

Question173: Which Check Point process provides logging services, such as forwarding logs from Gateway to Log Server, providing Log Export API (LEA) & Event Logging API (EL-A) services.

Question174: What has to be taken into consideration when configuring Management HA?

Question175: Your manager asked you to check the status of SecureXL, and its enabled templates and features. What command will you use to provide such information to manager?