DLP and Geo Policy are examples of what type of Policy?
A . Standard Policies
B . Shared Policies
C . Inspection Policies
D . Unified Policies
Answer: B
Explanation:
Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm?topic=documents/R80/CP_R80_SecMGMT/126197
Which of the following Automatically Generated Rules NAT rules have the lowest implementation priority?
A . Machine Hide NAT
B . Address Range Hide NAT
C . Network Hide NAT
D . Machine Static NAT
Answer: BC
Explanation:
SmartDashboard organizes the automatic NAT rules in this order:
If there are two administrators logged in at the same time to the SmartConsole, and there are objects locked for editing, what must be done to make them available to other administrators?
A . Publish or discard the session.
B . Revert the session.
C . Save and install the Policy.
D . Delete older versions of database.
Answer: A
Explanation:
To make changes available to all administrators, and to unlock the objects and rules that are being edited, the administrator must publish the session. To make your changes available to other administrators, and to save the database before installing a policy, you must publish the session. When you publish a session, a new database version is created. When you select Install Policy, you are prompted to publish all unpublished changes. You cannot install a policy if the included changes are not published.
Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm?topic=documents/R80/CP_R80_SecMGMT/126197
Joey wants to configure NTP on R80 Security Management Server. He decided to do this via WebUI.
What is the correct IP address and default port to access the Web UI for Gaia platform via browser?
A . https://<Device_IP_Address>
B . https://<Device_IP_Address>:443
C . https://<Device_IP_Address>:10000
D . https://<Device_IP_Address>:4434
Answer: B
Explanation:
Access to Web UI Gaia administration interface, initiate a connection from a browser to the default administration IP address: Logging in to the WebUI
Logging in
To log in to the WebUI:
Which of the following Automatically Generated Rules NAT rules have the lowest implementation priority?
A . Machine Hide NAT
B . Address Range Hide NAT
C . Network Hide NAT
D . Machine Static NAT
Answer: BC
Explanation:
SmartDashboard organizes the automatic NAT rules in this order:
Browser-based Authentication sends users to a web page to acquire identities using ________ .
A . User Directory
B . Captive Portal and Transparent Kerberos Authentication
C . Captive Portal
D . UserCheck
Answer: B
Explanation:
To enable Identity Awareness:
Using the SmartConsole, which pre-defined Permission Profile should be assigned to an administrator that requires full access to audit all configurations without modifying them?
A . Editor
B . Read Only All
C . Super User
D . Full Access
Answer: B
Explanation:
To create a new permission profile:
VPN gateways authenticate using ___________ and ___________ .
A . Passwords; tokens
B . Certificates; pre-shared secrets
C . Certificates; passwords
D . Tokens; pre-shared secrets
Answer: B
Explanation:
VPN gateways authenticate using Digital Certificates and Pre-shared secrets.
Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_VPN_AdminGuide/85469.htm
What is the order of NAT priorities?
A . Static NAT, IP pool NAT, hide NAT
B . IP pool NAT, static NAT, hide NAT
C . Static NAT, automatic NAT, hide NAT
D . Static NAT, hide NAT, IP pool NAT
Answer: A
Explanation:
The order of NAT priorities is:
Review the following screenshot and select the BEST answer.
A . Data Center Layer is an inline layer in the Access Control Policy.
B . By default all layers are shared with all policies.
C . If a connection is dropped in Network Layer, it will not be matched against the rules in Data Center Layer.
D . If a connection is accepted in Network-layer, it will not be matched against the rules in Data Center Layer.
Answer: C