EMT Practice Test

1. Question Content...

---

Question1: Which is not a blade option when configuring SmartEvent?

Question2: What is the command to show SecureXL status?

Question3: What command would show the API server status?

Question4: What is a feature that enables VPN connections to successfully maintain a private and secure VPN session without employing Stateful Inspection?

Question5: What CLI command will reset the IPS pattern matcher statistics?

Question6: What are the three components for Check Point Capsule?

Question7: Which file gives you a list of all security servers in use, including port number?

Question8: You have existing dbedit scripts from R77. Can you use them with R80.10?

Question9: Which directory below contains log files?

Question10: Fill in the blank: The R80 feature ________ permits blocking specific IP addresses for a specified time period.

Question11: On R80.10 the IPS Blade is managed by:

Question12: The CDT utility supports which of the following?

Question13: Sticky Decision Function (SDF) is required to prevent which of the following? Assume you set up an Active-Active cluster.

Question14: What is the responsibility of SOLR process on R80.10 management server?

Question15: In R80 spoofing is defined as a method of:

Question16: GAiA greatly increases operational efficiency by offering an advanced and intuitive software update agent, commonly referred to as the:

Question17: What is the purpose of Priority Delta in VRRP?

Question18: You want to store the GAiA configuration in a file for later reference. What command should you use?

Question19: Which features are only supported with R80.10 Gateways but not R77.x?

Question20: Which of the following statements is TRUE about R80 management plug-ins?

Question21: What can you do to see the current number of kernel instances in a system with CoreXL enabled?

Question22: SecureXL improves non-encrypted firewall traffic throughput and encrypted VPN traffic throughput.

Question23: Using mgmt_cli, what is the correct syntax to import a host object called Server_1 from the CLI?

Question24: Why would you not see a CoreXL configuration option in cpconfig?

Question25: You are investigating issues with two gateway cluster members that are not able to establish the first initial cluster synchronization. What service is used by the FWD daemon to do a Full Synchronization?

Question26: In SPLAT the command to set the timeout was idle. In order to achieve this and increase the timeout for Gaia, what command do you use?

Question27: Check Point APIs allow system engineers and developers to make changes to their organization's security policy with CLI tools and Web Services for all of the following except?

Question28: Full synchronization between cluster members is handled by Firewall Kernel. Which port is used for this?

Question29: Which of these options is an implicit MEP option?

Question30: You noticed that CPU cores on the Security Gateway are usually 100% utilized and many packets were dropped. You don't have a budget to perform a hardware upgrade at this time. To optimize drops you decide to use Priority Queues and fully enable Dynamic Dispatcher. How can you enable them?

Question31: John detected high load on sync interface. Which is most recommended solution?

Question32: Which packet info is ignored with Session Rate Acceleration?

Question33: Firewall policies must be configured to accept VRRP packets on the GAiA platform if it runs Firewall software. The Multicast destination assigned by the Internet Assigned Numbers Authority (IANA) for VRRP is:

Question34: When simulating a problem on CLusterXL cluster with cphaprob -d STOP -s problem -t 0 register, to initiate a failover on an active cluster member, what command allows you remove the problematic state?

Question35: Which web services protocol is used to communicate to the Check Point R80 identity Awareness Web APi?

Question36: You want to store the GAiA configuration in a file for later reference. What command should you use?

Question37: What scenario indicates that SecureXL is enabled?

Question38: What makes Anti-Bot unique compared to other Threat Prevention mechanisms, such as URL Filtering, Anti-Virus, IPS, and Threat Emulation?

Question39: When defining QoS global properties, which option below is not valid?

Question40: VPN Tunnel Sharing can be configured with any of the options below, EXCEPT One:

Question41: The Firewall kernel is replicated multiple times, therefore:

Question42: When Dynamic Dispatcher is enabled, connections are assigned dynamically with the exception of

Question43: Which is a suitable command to check whether Drop Templates are activated or not?

Question44: SmartEvent does NOT use which of the following procedures to identify events?

Question45: What happen when IPS profile is set in Detect-Only Mode for troubleshooting?

Question46: When deploying multiple clustered firewalls on the same subnet, what does the firewall administrator need to configure to prevent CCP broadcasts being sent to the wrong cluster?

Question47: What is the SOLR database for?

Question48: Which command collects diagnostic data for analyzing customer setup remotely?

Question49: For best practices, what is the recommended time for automatic unlocking of locked admin accounts?

Question50: What is the purpose of a SmartEvent Correlation Unit?