EMT Practice Test

1. Question Content...

---

Question1: Sticky Decision Function (SDF) is required to prevent which of the following? Assume you set up an Active-Active cluster.

Question2: Fill in the blank: The R80 feature ________ permits blocking specific IP addresses for a specified time period.

Question3: When simulating a problem on CLusterXL cluster with cphaprob -d STOP -s problem -t 0 register, to initiate a failover on an active cluster member, what command allows you remove the problematic state?

Question4: Which of these options is an implicit MEP option?

Question5: The Security Gateway is installed on GAiA R80. The default port for the Web User Interface is _______.

Question6: What is the responsibility of SOLR process on R80.10 management server?

Question7: GAiA greatly increases operational efficiency by offering an advanced and intuitive software update agent, commonly referred to as the:

Question8: Tom has been tasked to install Check Point R80 in a distributed deployment. Before Tom installs the systems this way, how many machines will be need if he does NOT include a SmartConsole machine in his calculations?

Question9: Which is not a blade option when configuring SmartEvent?

Question10: When defining QoS global properties, which option below is not valid?

Question11: SecureXL improves non-encrypted firewall traffic throughput and encrypted VPN traffic throughput.

Question12: In which case is a Sticky Decision Function relevant?

Question13: You are working with multiple Security Gateways enforcing an extensive number of rules. To simplify security administration, which action would you choose?

Question14: Which command collects diagnostic data for analyzing customer setup remotely?

Question15: When Dynamic Dispatcher is enabled, connections are assigned dynamically with the exception of

Question16: Which packet info is ignored with Session Rate Acceleration?

Question17: Why would you not see a CoreXL configuration option in cpconfig?

Question18: The Firewall kernel is replicated multiple times, therefore:

Question19: What can you do to see the current number of kernel instances in a system with CoreXL enabled?

Question20: What makes Anti-Bot unique compared to other Threat Prevention mechanisms, such as URL Filtering, Anti-Virus, IPS, and Threat Emulation?

Question21: What is the purpose of a SmartEvent Correlation Unit?

Question22: In Gaia, if one is unsure about a possible command, what command lists all possible commands.

Question23: Fill in the blank: The R80 utility fw monitoris used to troubleshoot __________.

Question24: You want to store the GAiA configuration in a file for later reference. What command should you use?

Question25: What command would show the API server status?

Question26: On R80.10 the IPS Blade is managed by:

Question27: What is the SOLR database for?

Question28: The following command is used to verify the CPUSE version:

Question29: Which one of these is NOT a firewall chain?

Question30: Full synchronization between cluster members is handled by Firewall Kernel. Which port is used for this?

Question31: You have existing dbedit scripts from R77. Can you use them with R80.10?

Question32: What happen when IPS profile is set in Detect-Only Mode for troubleshooting?

Question33: Fill in the blank: The tool ___________ generates a R80 Security Gateway configuration report.

Question34: When deploying multiple clustered firewalls on the same subnet, what does the firewall administrator need to configure to prevent CCP broadcasts being sent to the wrong cluster?

Question35: The CDT utility supports which of the following?

Question36: Fill in the blank: The command _______________ provides the most complete restoration of a R80 configuration.

Question37: In SPLAT the command to set the timeout was idle. In order to achieve this and increase the timeout for Gaia, what command do you use?

Question38: What is a feature that enables VPN connections to successfully maintain a private and secure VPN session without employing Stateful Inspection?

Question39: SmartEvent does NOT use which of the following procedures to identify events?

Question40: When doing a Stand-Alone Installation, you would install the Security Management Server with which other Check Point architecture component?

Question41: Which directory below contains log files?

Question42: What are the three components for Check Point Capsule?

Question43: The Correlation Unit performs all but which of the following actions:

Question44: Which of the following statements is TRUE about R80 management plug-ins?

Question45: You noticed that CPU cores on the Security Gateway are usually 100% utilized and many packets were dropped. You don't have a budget to perform a hardware upgrade at this time. To optimize drops you decide to use Priority Queues and fully enable Dynamic Dispatcher. How can you enable them?

Question46: Check Point APIs allow system engineers and developers to make changes to their organization's security policy with CLI tools and Web Services for all of the following except?

Question47: The "MAC magic" value must be modified under the following condition:

Question48: Which is a suitable command to check whether Drop Templates are activated or not?

Question49: John detected high load on sync interface. Which is most recommended solution?

Question50: What is the purpose of Priority Delta in VRRP?

Question51: VPN Tunnel Sharing can be configured with any of the options below, EXCEPT One:

Question52: Which features are only supported with R80.10 Gateways but not R77.x?

Question53: Vanessa is expecting a very important Security Report. The Document should be sent as an attachment via e-mail. An e-mail with Security_ report.pdf file was delivered to her e-mail inbox. When she opened the PDF file, she noticed that the file is basically empty and only few lines of text are in it. The report is missing some graphs, tables and links. Which component of SandBlast protection is her company using on a Gateway?

Question54: In R80 spoofing is defined as a method of:

Question55: Using mgmt_cli, what is the correct syntax to import a host object called Server_1 from the CLI?