EMT Practice Test

1. Question Content...

---

Question1: Choose the ClusterXL process that is defined by default as a critical device?

Question2: What command would show the API server status?

Question3: What can you do to see the current number of kernel instances in a system with CoreXL enabled?

Question4: What are the three components for Check Point Capsule?

Question5: The CDT utility supports which of the following?

Question6: VPN Tunnel Sharing can be configured with any of the options below, EXCEPT One:

Question7: GAiA greatly increases operational efficiency by offering an advanced and intuitive software update agent, commonly referred to as the:

Question8: Which one of these is NOT a firewall chain?

Question9: What makes Anti-Bot unique compared to other Threat Prevention mechanisms, such as URL Filtering, Anti-Virus, IPS, and Threat Emulation?

Question10: Tom has been tasked to install Check Point R80 in a distributed deployment. Before Tom installs the systems this way, how many machines will be need if he does NOT include a SmartConsole machine in his calculations?

Question11: What does the command vpn crl__zapdo?

Question12: What is true of the API server on R80.10?

Question13: As a valid Mobile Access Method, what feature provides Capsule Connect/VPN?

Question14: In Gaia, if one is unsure about a possible command, what command lists all possible commands.

Question15: Full synchronization between cluster members is handled by Firewall Kernel. Which port is used for this?

Question16: Which is NOT an example of a Check Point API?

Question17: Using mgmt_cli, what is the correct syntax to import a host object called Server_1 from the CLI?

Question18: Which command shows the current connections distributed by CoreXL FW instances?

Question19: Which Check Point software blades could be enforced under Threat Prevention profile using Check Point R80.10 SmartConsole application?

Question20: During inspection of your Threat Prevention logs you find four different computers having one event each with a Critical Severity. Which of those hosts should you try to remediate first?

Question21: Fill in the blank: The R80 utility fw monitoris used to troubleshoot __________.

Question22: Check Point APIs allow system engineers and developers to make changes to their organization's security policy with CLI tools and Web Services for all of the following except?

Question23: Which command will allow you to see the interface status?

Question24: What is the purpose of a SmartEvent Correlation Unit?

Question25: Which packet info is ignored with Session Rate Acceleration?

Question26: What CLI command compiles and installs a Security Policy on the target's Security Gateways?

Question27: Security Checkup Summary can be easily conducted within:

Question28: After successfully exporting a policy package, how would you import that package into another SMS database in R80.10?

Question29: You need to change the number of firewall instances used by CoreXL. How can you achieve this goal?

Question30: What is the most ideal Synchronization Status for Security Management Server High Availability deployment?

Question31: What is the valid range for VRID value in VRRP configuration?

Question32: You are investigating issues with two gateway cluster members that are not able to establish the first initial cluster synchronization. What service is used by the FWD daemon to do a Full Synchronization?

Question33: You want to verify if your management server is ready to upgrade to R80.10. What tool could you use in this process?

Question34: What is the command to see cluster status in cli expert mode?

Question35: What is the responsibility of SOLR process on R80.10 management server?

Question36: What is correct statement about Security Gateway and Security Management Server failover in Check Point R80.X in terms of Check Point Redundancy driven solutions?

Question37: What is the mechanism behind Threat Extraction?

Question38: Which one of these features is NOT associated with the Check Point URL Filtering and Application Control Blade?

Question39: You noticed that CPU cores on the Security Gateway are usually 100% utilized and many packets were dropped. You don't have a budget to perform a hardware upgrade at this time. To optimize drops you decide to use Priority Queues and fully enable Dynamic Dispatcher. How can you enable them?

Question40: What are the methods of SandBlast Threat Emulation deployment?

Question41: When Dynamic Dispatcher is enabled, connections are assigned dynamically with the exception of

Question42: Firewall policies must be configured to accept VRRP packets on the GAiA platform if it runs Firewall software. The Multicast destination assigned by the Internet Assigned Numbers Authority (IANA) for VRRP is:

Question43: When simulating a problem on CLusterXL cluster with cphaprob -d STOP -s problem -t 0 register, to initiate a failover on an active cluster member, what command allows you remove the problematic state?

Question44: You want to store the GAiA configuration in a file for later reference. What command should you use?

Question45: What happen when IPS profile is set in Detect-Only Mode for troubleshooting?

Question46: When doing a Stand-Alone Installation, you would install the Security Management Server with which other Check Point architecture component?

Question47: Mobile Access supports all of the following methods of Link Translation EXCEPT:

Question48: When defining QoS global properties, which option below is not valid?

Question49: As an administrator, you may be required to add the company logo to reports. To do this, you would save the logo as a PNG file with the name 'cover-company-logo.png' and then copy that image file to which directory on the SmartEvent server?

Question50: Which command is used to display status information for various components?

Question51: Fill in the blank: The tool ___________ generates a R80 Security Gateway configuration report.

Question52: You are working with multiple Security Gateways enforcing an extensive number of rules. To simplify security administration, which action would you choose?

Question53: What is a feature that enables VPN connections to successfully maintain a private and secure VPN session without employing Stateful Inspection?

Question54: On R80.10 when configuring Third-Party devices to read the logs using the LEA (Log Export API) the default Log Server uses port:

Question55: What is the least ideal Synchronization Status for Security Management Server High Availability deployment?

Question56: Which is not a blade option when configuring SmartEvent?

Question57: Which deployment methods can an administrator choose when deploying the Sandblast agent?

Question58: NAT rules are prioritized in which order?
1. Automatic Static NAT
2. Automatic Hide NAT
3. Manual/Pre-Automatic NAT
4. Post-Automatic/Manual NAT rules

Question59: Sticky Decision Function (SDF) is required to prevent which of the following? Assume you set up an Active-Active cluster.

Question60: Why would you not see a CoreXL configuration option in cpconfig?

Question61: In which case is a Sticky Decision Function relevant?

Question62: What's true about Troubleshooting option in the IPS profile properties?

Question63: In SPLAT the command to set the timeout was idle. In order to achieve this and increase the timeout for Gaia, what command do you use?

Question64: Which NAT rules are prioritized first?

Question65: Which is a suitable command to check whether Drop Templates are activated or not?

Question66: Which of the following statements is TRUE about R80 management plug-ins?

Question67: SmartEvent does NOT use which of the following procedures to identify events?

Question68: What is the purpose of Priority Delta in VRRP?

Question69: Which directory below contains log files?

Question70: The Firewall kernel is replicated multiple times, therefore:

Question71: You have existing dbedit scripts from R77. Can you use them with R80.10?

Question72: Fill in the blank: The command _______________ provides the most complete restoration of a R80 configuration.

Question73: Which of the SecureXL templates are enabled by default on Security Gateway?

Question74: The Security Gateway is installed on GAiA R80. The default port for the Web User Interface is _______.

Question75: Which command will reset the kernel debug options to default settings?

Question76: If the Active Security Management Server fails or if it becomes necessary to change the Active to Standby, the following steps must be taken to prevent data loss. Providing the Active Security Management Server is responsive, which of these steps should NOT be performed:

Question77: How many images are included with Check Point TE appliance in Recommended Mode?

Question78: What GUI client would you use to view an IPS packet capture?

Question79: SecureXL improves non-encrypted firewall traffic throughput and encrypted VPN traffic throughput.