Which of the following is NOT an internal/native Check Point command?

Which of the following is NOT an internal/native Check Point command?A . fwaccel onB . fw ct1 debugC . tcpdumpD . cphaprobView AnswerAnswer: C

December 10, 2018 No Comments READ MORE +

What Shell is required in Gaia to use WinSCP?

What Shell is required in Gaia to use WinSCP?A . UNIXB . CPShellC . CLISHD . BashView AnswerAnswer: D Explanation: Reference: https://winscp.net/eng/docs/ui_login_scp

December 8, 2018 No Comments READ MORE +

Which of these options is an implicit MEP option?

Which of these options is an implicit MEP option?A . Primary-backupB . Source address basedC . Round robinD . Load SharingView AnswerAnswer: A Explanation: There are three methods to implement implicit MEP: - First to Respond, in which the first Security Gateway to reply to the peer Security Gateway is...

December 3, 2018 No Comments READ MORE +

Which command collects diagnostic data for analyzing customer setup remotely?

Which command collects diagnostic data for analyzing customer setup remotely?A . cpinfoB . migrate exportC . sysinfoD . cpviewView AnswerAnswer: A Explanation: CPInfo is an auto-updatable utility that collects diagnostics data on a customer's machine at the time of execution and uploads it to Check Point servers (it replaces the...

December 3, 2018 No Comments READ MORE +

On R80.10 the IPS Blade is managed by:

On R80.10 the IPS Blade is managed by:A . Threat Protection policyB . Anti-Bot BladeC . Threat Prevention policyD . Layers on Firewall policyView AnswerAnswer: A Explanation: Reference: https://www.checkpoint.com/downloads/product-related/r80.10-mgmt-architecture-overview.pdf very top of last page.

November 1, 2018 No Comments READ MORE +

How can you enable them?

You noticed that CPU cores on the Security Gateway are usually 100% utilized and many packets were dropped. You don’t have a budget to perform a hardware upgrade at this time. To optimize drops you decide to use Priority Queues and fully enable Dynamic Dispatcher. How can you enable them?A...

October 25, 2018 No Comments READ MORE +

What is an option for deployment of Check Point SandBlast Zero-Day Protection?

SandBlast offers flexibility in implementation based on their individual business needs. What is an option for deployment of Check Point SandBlast Zero-Day Protection?A . Smart Cloud ServicesB . Load Sharing Mode ServicesC . Threat Agent SolutionD . Public Cloud ServicesView AnswerAnswer: C Explanation: Reference: https://www.checkpoint.com/products/threat-emulation-sandboxing/

October 20, 2018 No Comments READ MORE +

Which components allow you to reset a VPN tunnel?

Which components allow you to reset a VPN tunnel?A . vpn tucommand or SmartView monitorB . delete vpn ike saor vpn she11 commandC . vpn tunnelutilor delete vpn ike sa commandD . SmartView monitor onlyView AnswerAnswer: D

October 18, 2018 No Comments READ MORE +

Which packet info is ignored with Session Rate Acceleration?

Which packet info is ignored with Session Rate Acceleration?A . source port rangesB . source ipC . source portD . same info from Packet Acceleration is usedView AnswerAnswer: C Explanation: Reference: http://trlj.blogspot.com/2015/10/check-point-acceleration.html

October 6, 2018 No Comments READ MORE +

The Firewall kernel is replicated multiple times, therefore:

The Firewall kernel is replicated multiple times, therefore:A . The Firewall kernel only touches the packet if the connection is acceleratedB . The Firewall can run different policies per coreC . The Firewall kernel is replicated only with new connections and deletes itself once the connection times outD . The...

October 5, 2018 No Comments READ MORE +