EMT Practice Test

1. Question Content...

---

Question1: Which of these changes to a Security Policy optimizes Security Gateway performance?

Question2: In SmartView Tracker, which rule shows when a packet is dropped due to anti-spoofing?

Question3: Which Check Point QoS feature is used to dynamically allocate relative portions of available bandwidth?

Question4: Select the correct statement about Secure Internal Communications (SIC) Certificates? SIC Certificates:

Question5: State Synchronizatioin is enable on both members in a cluster, and the Security Policy is successfully installed. No protocols or services have been unselected for "selective sync".
The following is the fw tab -t connections -s output from both members:

Is State Synchronization working properly between the two members?

Question6: Which NGX feature or command allows Security Administrators to revert to earlier versions of the Security Policy without changing object configurations?

Question7: The following is cphaprob state command output from a New Mode High Availability cluster member:
Which machine has the highest priority?

Question8: How can you prevent delay-sensitive applications, such as video and voice traffic, from being dropped due to long queue using Check Point QoS solution?

Question9: Jill is about to test some rule and object changes suggested in an NGX newsgroup. Which backup and restore solution should Jill use, to ensure she can most easily restore her Security Policy to its previous configuration, after testing the changes?

Question10: When you change an implicit rule's order from "last" to "first" in Global Properties, how do you make the change effective?

Question11: Ophelia is the Security Administrator for a shipping company. Her company uses a custom application to update the distribution database. The custom application includes a service used only to notify remote sites that the distribution database is malfunctioning. The perimeter Security Gateway's Rule Base includes a rue to accept this traffic. Ophelia needs to the notified, via a text message to her cellular phone, whenever traffic is accepted on this rule. Which of the following options is MOST appropriate for Ophelia's requirement?

Question12: Steve tries to configure Directional VPN Rule Match in the Rule Base. But the Match column does not have the option to see the Directional Match. Steve sees the following screen. What is the problem?

Question13: How do you view a Security Administrator's activities, using SmartConsole tools? With:

Question14: What is the command to see the licenses of the Security Gateway FWDALLAS from your SmartCenter Server?

Question15: Your SmartCenter Server fails and does not reboot. One of your remote Security Gateways managed by the SmartCenter Server reboots. What happens to that remote Gateway after reboot?

Question16: Which mechanism is used to export Check Point logs to third party applications?

Question17: Regarding QoS guarantees and limits, which of the following statements is FALSE?

Question18: Which of the following is the final step in an NGX backup?

Question19: Which of the following actions is most likely to improve the performance of Check Point QoS?

Question20: Which command allows you to view the contents of an NGX table?

Question21: You are preparing computers for a new ClusterXL deployment. For your cluster, you plan to use three machines with the following configuration:

Are these machines correctly configured for a ClusterXL deployment?

Question22: Your NGX Enterprise SmartCenter Server is working normally. However, you must reinstall the SmartCenter Server, but keep the SmartCenter Server configuration (for example, all Security Policies, database, etc.) How would you reinstall the Server and keep its configuration?

Question23: With SmartDashboard's Smart Directory, you can create NGX user definitions on a(n)_______Server.

Question24: How can you completely tear down a specific VPN tunnel in an intranet IKE VPN deployment?

Question25: Your VPN Community includes three Security Gateways. Each Gateway has its own internal network defined as a VPN Domain. You must test the VPN-1 NGX route-based VPN feature, without stopping the VPN. What is the correct order of steps?

Question26: As a Security Administrator, you must configure anti-spoofing on Security Gateway interfaces, to protect your internal networks. What is the correct anti-spoofing setting on interface ETH1 in this network diagram?
NOTE: In the DMZ, mail server 192.168.16.10 is statically translated to the object
"mail_valid", with IP address 210.210.210.3. The FTP server 192.168.16.15 is statically translated to the object "ftp_vaild", with IP address 210.210.210.5

Question27: Where can a Security Administrator adjust the unit of measurement (bps, Kbps or Bps), for Check Point QoS bandwidth?

Question28: You create two Policy Packages for two NGX Security Gateways. For the first Policy Package, you selected security and Address Translation and QoS Policy. For the second Policy Package, you selected Security and Address Translation and Desktop Security Policy. In the first Policy Package, you enabled host-based port scan from the SmartDefense tab. You save and install the policy to the relevant Gateway object. How is the port scan configured on the second Policy Package's SmartDefense tab?

Question29: What is the behavior of ClusterXL in a High Availability environment?

Question30: Doug wants to know who installed a Security Policy blocking all traffic from the corporate network. Which SmartView Tracker selection is best suited for this?

Question31: You are trying to enter a new user, group, or organizational unit on an LDAP server, and you encounter the error "violates schema". To provide the BEST long-term security, you should:

Question32: You are reviewing SmartView Tracker entries, and see a Connection Rejection on a Check Point QoS rule. What causes the Connecion Rejection?

Question33: Which of the following actions is most likely to improve the performance of Check Point QoS?

Question34: Which VPN Community object is used to configure VPN routing within the
SmartDashboard?

Question35: When you hide a rule in a Rule Base, how can you disable the rule?

Question36: If you check the box "Use Aggressive Mode", in the IKE Properties dialog box:

Question37: Andrea has created a new gateway object that she will be managing at a remote location.
She attempts to install the Security Policy to the new gateway object, but the object does not appear in the "install on" box. Which of the following is the most likely cause?

Question38: Frank wants to know why users on the corporate network cannot receive multicast transmission from the Internet. An NGX Security Gateway protects the corporate network from the Internet. Which of the following is a possible cause for the connection problem?

Question39: Jacob is using a mesh VPN Community to create a site-to-site VPN. The VPN properties in this mesh Community display in this graphic:

Which of the following statements is TRUE?

Question40: What is the command to see the licenses of the Security Gateway FWDALLAS from you SmartCenter Server?

Question41: You users defined in a Windows 2000 Active Directory server. You must add LDAP users to a Client Authentication rule. Which kind of user group do you need in the Client Authentication rule in NGX?

Question42: When you find a suspicious connection from a problematic host, you want to block everything from that whole network, not just the host. You want to block this for an hour, but you do not want to add any rules to the Rule Base. How do you achieve this?

Question43: You are running a VPN-1 NG with Application Intelligence R54 SecurePlatform VPN-1 Pro Gateway. The Gateway also serves as a Policy Server. When you run patch add cd from the NGX CD, what does this command allow you to upgrade?

Question44: Jeremy manages sites in Tokyo, Calcutta and Dallas, from his office in Chicago. He is trying to create a report for management, detailing the current software level of each Security Gateway. He also wants to create a proposal outline, listing the most cost-effective way to upgrade his Gateways. Which two SmartConsole applications should Jeremy use, to create his report and outline?

Question45: How can you prevent delay-sensitive applications, such as video and voice traffic, from being dropped due to long queue using Check Point QoS solution?

Question46: Jerry is concerned that a denial-of-service (DoS) attack may affect his VPN Communities.
He decides to implement IKE DoS protection. Jerry needs to minimize the performance impact of implementing this new protection. Which of the following configuraions is MOST appropriate for Jerry?

Question47: Jack's project is to define the backup and restore section of his organization's disaster recovery plan for his organization??s distributed NGX installation. Jack must meet the following required and desired objectives:
Required Objective: The security policy repository must be backed up no less frequently than every 24 hours.
Desired Objective: The NGX components that enforce the Security Policies should be backed up no less frequently than once a week.
Desired Objective: Back up NGX logs no less frequently than once a week.
Jack's disaster recovery plan is as follows:
1.*Use the cron utility to run the upgrade_export command each night on the SmartCenter Servers. Configure the organization's routine backup software to back up the files created by the upgrade_export command.
2.*Configure the SecurePlanform backup utility to back up the Security Gateways every Saturday night.
3.*Use the cron utility to run the upgrade_export comand each Saturday night on the Log Servers. Configure an automatic, nightly logswitch. Configure the organization's routine backup software to back up the switched logs every night.
Jack's plan:

Question48: Which of the following commands is used to restore NGX configuration information?

Question49: Which of the following commands shows full synchronization status?

Question50: Ben is the Security Administrator for a university. Ben configured and installed a new Security Policy this morning. An hour after installing the new Security Policy. Ben began receiving complaints that Internet access was very slow. Ben called his Internet Service Provider, who asked Ben how much virtual memory his Security Gateway had. Which SmartConsole application should Ben use to answer this question?

Question51: Gail is the Security Administrator for a marking firm. Gail is working with the networking team, to troubleshoot user complaints regarding access to audio-streaming material from the Internet. The networking team asks Gail to check the object and rule configuration settings for the perimeter Security Gateway. Which SmartConsole application should Gail use to check these objects and rules?

Question52: IIse manages a distributed NGX installation for a large bank. IIse needs to know which Security Gateways have licenses that will expire within the next 30 days. Which SmartConsole application should IIse use to gather this information?

Question53: John is the Security Administrator for a public hospital. New health-care legislation requires logging for all traffic accepted through the perimeter Security Gateway. What must John do, to ensure implied rules meet the new requirement?

Question54: Which mechanism is used to export Check Point logs to third party applications?

Question55: Which NGX feature or command allows Security Administrators to revert to earlier versions of the Security Policy without changing object configurations?