156-215.80 Online Training Archives

Exam4Training can provide a shortcut for you and save you a lot of time and effort. Exam4Training will provide good Check Point 156-215.80 Check Point Certified Security Administrator R80 Online Training for your Check Point certification 156-215.80 exam and help you pass 156-215.80 Check Point Certified Security Administrator R80 exam. If you see other websites provide relevant information to the website, you can continue to look down and you will find that in fact the information is mainly derived from our Exam4Training. Our Exam4Training provide the most comprehensive information and update fastest.

Page 1 of 14

1. Which of the following is NOT an integral part of VPN communication within a network?

VPN key

VPN community

VPN trust entities

VPN domain

2. Two administrators Dave and Jon both manage R80 Management as administrators for ABC Corp. Jon logged into the R80 Management and then shortly after Dave logged in to the same server. They are both in the Security Policies view.

From the screenshots below, why does Dave not have the rule no.6 in his SmartConsole view even though Jon has it his in his SmartConsole view?

Jon is currently editing rule no.6 but has Published part of his changes.

Dave is currently editing rule no.6 and has marked this rule for deletion.

Dave is currently editing rule no.6 and has deleted it from his Rule Base.

Jon is currently editing rule no.6 but has not yet Published his changes.

3. Vanessa is firewall administrator in her company; her company is using Check Point firewalls on central and remote locations, which are managed centrally by R80 Security Management Server. One central location has an installed R77.30 Gateway on Open server. Remote location is using Check Point UTM-1 570 series appliance with R71.

Which encryption is used in Secure Internal Communication (SIC) between central management and firewall on each location?

On central firewall AES128 encryption is used for SIC, on Remote firewall 3DES encryption is used for SI

On both firewalls, the same encryption is used for SI

This is AES-GCM-256.

The Firewall Administrator can choose which encryption suite will be used by SI

On central firewall AES256 encryption is used for SIC, on Remote firewall AES128 encryption is used for SI

4. Review the following screenshot and select the BEST answer.

Data Center Layer is an inline layer in the Access Control Policy.

By default all layers are shared with all policies.

If a connection is dropped in Network Layer, it will not be matched against the rules in Data Center Layer.

If a connection is accepted in Network-layer, it will not be matched against the rules in Data Center Layer.

5. Which of the following is NOT a SecureXL traffic flow?

Medium Path

Accelerated Path

High Priority Path

Slow Path

6. Which of the following Automatically Generated Rules NAT rules have the lowest implementation priority?

Machine Hide NAT

Address Range Hide NAT

Network Hide NAT

Machine Static NAT

7. VPN gateways authenticate using ___________ and ___________ .

Passwords; tokens

Certificates; pre-shared secrets

Certificates; passwords

Tokens; pre-shared secrets

8. In R80 spoofing is defined as a method of:

Disguising an illegal IP address behind an authorized IP address through Port Address Translation.

Hiding your firewall from unauthorized users.

Detecting people using false or wrong authentication logins

Making packets appear as if they come from an authorized IP address.

9. The __________ is used to obtain identification and security information about network users.

User Directory

User server

UserCheck

User index

10. Which Check Point feature enables application scanning and the detection?

Application Dictionary

AppWiki

Application Library

CPApp

Page 2 of 14

11. DLP and Geo Policy are examples of what type of Policy?

Standard Policies

Shared Policies

Inspection Policies

Unified Policies

12. In which deployment is the security management server and Security Gateway installed on the same appliance?

Bridge Mode

Remote

Standalone

Distributed

13. A _________ VPN deployment is used to provide remote users with secure access to internal corporate resources by authenticating the user through an internet browser.

Clientless remote access

Clientless direct access

Client-based remote access

Direct access

14. Which of the following statements is TRUE about R80 management plug-ins?

The plug-in is a package installed on the Security Gateway.

Installing a management plug-in requires a Snapshot, just like any upgrade process.

A management plug-in interacts with a Security Management Server to provide new features and support for new products.

Using a plug-in offers full central management only if special licensing is applied to specific features of the plug-in.

15. Gaia can be configured using the _______ or ______ .

GaiaUI; command line interface

WebUI; Gaia Interface

Command line interface; WebUI

Gaia Interface; GaiaUI

16. Log into Security Gateway CLI and run command cphaprob down.

1, 2, and 3

2 and 3

1 and 2

1 and 3

17. Which utility allows you to configure the DHCP service on GAIA from the command line?

ifconfig

dhcp_cfg

sysconfig

cpconfig

18. Which VPN routing option uses VPN routing for every connection a satellite gateway handles?

To satellites through center only

To center only

To center and to other satellites through center

To center, or through the center to other satellites, to internet and other VPN targets

19. Which product correlates logs and detects security threats, providing a centralized display of potential attack patterns from all network devices?

SmartView Monitor

SmartEvent

SmartUpdate

SmartDashboard

20. Assuming you have a Distributed Deployment, what will be the effect of running the following command on the Security Management Server?

Remove the installed Security Policy.

Remove the local ACL lists.

No effect.

Reset SIC on all gateways.

Page 3 of 14

21. An administrator is creating an IPsec site-to-site VPN between his corporate office and branch office. Both offices are protected by Check Point Security Gateway managed by the same Security Management Server. While configuring the VPN community to specify the pre-shared secret, the administrator found that the check box to enable pre-shared secret is shared and cannot be enabled.

Why does it not allow him to specify the pre-shared secret?

IPsec VPN blade should be enabled on both Security Gateway.

Pre-shared can only be used while creating a VPN between a third party vendor and Check Point Security Gateway.

Certificate based Authentication is the only authentication method available between two Security Gateway managed by the same SM

The Security Gateways are pre-R75.40.

22. You are the senior Firewall administrator for ABC Corp., and have recently returned from a training course on Check Point's new advanced R80 management platform. You are presenting an in-house overview of the new features of Check Point R80 Management to the other administrators in ABC Corp.

How will you describe the new “Publish” button in R80 Management Console?

The Publish button takes any changes an administrator has made in their management session, publishes a copy to the Check Point of R80, and then saves it to the R80 database.

The Publish button takes any changes an administrator has made in their management session and publishes a copy to the Check Point Cloud of R80 and but does not save it to the R80

The Publish button makes any changes an administrator has made in their management session visible to all other administrator sessions and saves it to the Database.

The Publish button makes any changes an administrator has made in their management session visible to the new Unified Policy session and saves it to the Database.

23. Which of the following ClusterXL modes uses a non-unicast MAC address for the cluster IP address.

High Availability

Load Sharing Multicast

Load Sharing Pivot

Master/Backup

24. With the User Directory Software Blade, you can create R80 user definitions on a(an) ___________ Server.

NT domain

SMTP

LDAP

SecurID

25. Which of the following is NOT a component of a Distinguished Name?

Organizational Unit

Country

Common Name

User container

26. What are the three authentication methods for SIC?

Passwords, Users, and standards-based SSL for the creation of secure channels

Certificates, standards-based SSL for the creation of secure channels, and 3DES or AES128 for encryption

Packet Filtering, certificates, and 3DES or AES128 for encryption

Certificates, Passwords, and Tokens

27. You have enabled “Extended Log” as a tracking option to a security rule.

However, you are still not seeing any data type information.

What is the MOST likely reason?

Logging has disk space issues. Change logging storage options on the logging server or Security Management Server properties and install database.

Content Awareness is not enabled.

Identity Awareness is not enabled.

Log Trimming is enabled.

28. What is the order of NAT priorities?

Static NAT, IP pool NAT, hide NAT

IP pool NAT, static NAT, hide NAT

Static NAT, automatic NAT, hide NAT

Static NAT, hide NAT, IP pool NAT

29. Which of the following is an identity acquisition method that allows a Security Gateway to identify Active Directory users and computers?

UserCheck

Active Directory Query

Account Unit Query

User Directory Query

30. Ken wants to obtain a configuration lock from other administrator on R80 Security Management Server Operating System. He can do this via WebUI or via CLI.

Which command should he use in CLI?

remove database lock

The database feature has one command: lock database override.

override database lock

The database feature has two commands: lock database overrideand unlock database. Both will work.

Page 4 of 14

31. Examine the following Rule Base.

What can we infer about the recent changes made to the Rule Base?

Rule 7 was created by the 'admin' administrator in the current session

8 changes have been made by administrators since the last policy installation

Te rules 1, 5 and 6 cannot be edited by the 'admin' administrator

Rule 1 and object webserver are locked by another administrator

32. ALPHA Corp has a new administrator who logs into the Gaia Portal to make some changes. He realizes that even though he has logged in as an administrator, he is unable to make any changes because all configuration options are greyed out as shown in the screenshot image below.

What is the likely cause for this?

The Gaia /bin/confdis locked by another administrator from a SmartConsole session.

The database is locked by another administrator SSH session.

The Network address of his computer is in the blocked hosts.

The IP address of his computer is not in the allowed hosts.

33. Administrator Kofi has just made some changes on his Management Server and then clicks on the Publish button in SmartConsole but then gets the error message shown in the screenshot below.

Where can the administrator check for more information on these errors?

The Log and Monitor section in SmartConsole

The Validations section in SmartConsole

The Objects section in SmartConsole

The Policies section in SmartConsole

34. You are working with multiple Security Gateways enforcing an extensive number of rules. To simplify security administration, which action would you choose?

Eliminate all possible contradictory rules such as the Stealth or Cleanup rules.

Create a separate Security Policy package for each remote Security Gateway.

Create network objects that restrict all applicable rules to only certain networks.

Run separate SmartConsole instances to login and configure each Security Gateway directly.

35. Harriet wants to protect sensitive information from intentional loss when users browse to a specific URL: https://personal.mymail.com, which blade will she enable to achieve her goal?

DLP

SSL Inspection

Application Control

URL Filtering

36. To optimize Rule Base efficiency the most hit rules should be where?

Removed from the Rule Base.

Towards the middle of the Rule Base.

Towards the top of the Rule Base.

Towards the bottom of the Rule Base.

37. Which of the following is NOT a license activation method?

SmartConsole Wizard

Online Activation

License Activation Wizard

Offline Activation

38. Which policy type has its own Exceptions section?

Thread Prevention

Access Control

Threat Emulation

Desktop Security

39. By default, which port does the WebUI listen on?

B. 4434

C. 443

D. 8080

40. When doing a Stand-Alone Installation, you would install the Security Management Server with which other Check Point architecture component?

None, Security Management Server would be installed by itself.

SmartConsole

SecureClient

Security Gateway

Page 5 of 14

41. Which options are given on features, when editing a Role on Gaia Platform?

Read/Write, Read Only

Read/Write, Read Only, None

Read/Write, None

Read Only, None

42. What is the default time length that Hit Count Data is kept?

3 month

4 weeks

12 months

1 week

43. Choose the Best place to find a Security Management Server backup file named backup_fw, on a Check Point Appliance.

/var/log/Cpbackup/backups/backup/backup_fw.tgs

/var/log/Cpbackup/backups/backup/backup_fw.tar

/var/log/Cpbackup/backups/backups/backup_fw.tar

/var/log/Cpbackup/backups/backup_fw.tgz

44. With which command can you view the running configuration of Gaia Operating system.

show conf-active

show configuration active

show configuration

show running-configuration

45. Which of the following is TRUE regarding Gaia command line?

Configuration changes should be done in mgmt_cli and use CLISH for monitoring. Expert mode is used only for OS level tasks.

Configuration changes should be done in expert-mode and CLISH is used for monitoring.

Configuration changes should be done in mgmt-cli and use expert-mode for OS-level tasks.

All configuration changes should be made in CLISH and expert-mode should be used for OS-level tasks.

46. If there are two administrators logged in at the same time to the SmartConsole, and there are objects locked for editing, what must be done to make them available to other administrators?

Publish or discard the session.

Revert the session.

Save and install the Policy.

Delete older versions of database.

47. Which one of the following is the preferred licensing model?

Local licensing because it ties the package license to the IP-address of the gateway and has no dependency of the Security Management Server.

Central licensing because it ties the package license to the IP-address of the Security Management Server and has no dependency of the gateway.

Local licensing because it ties the package license to the MAC-address of the gateway management interface and has no Security Management Server dependency.

Central licensing because it ties the package license to the MAC-address of the Security Management Server Mgmt-interface and has no dependency of the gateway.

48. Tom has been tasked to install Check Point R80 in a distributed deployment. Before Tom installs the systems this way, how many machines will he need if he does NOT include a SmartConsole machine in his calculations?

One machine, but it needs to be installed using SecurePlatform for compatibility purposes.

One machine

Two machines

Three machines

49. A new license should be generated and installed in all of the following situations EXCEPT when ________ .

The license is attached to the wrong Security Gateway

The existing license expires

The license is upgraded

The IP address of the Security Management or Security Gateway has changed

50. What is the default shell for the command line interface?

Expert

Clish

Admin

Normal

Page 6 of 14

51. When you upload a package or license to the appropriate repository in SmartUpdate, where is the package or license stored

Security Gateway

Check Point user center

Security Management Server

SmartConsole installed device

52. The tool _______ generates a R80 Security Gateway configuration report.

infoCP

infoview

cpinfo

fw cpinfo

53. Which of the following commands can be used to remove site-to-site IPSEC Security Associations (SA)?

vpn tu

vpn ipsec remove -l

vpn debug ipsec

fw ipsec tu

54. Which of the following is NOT an authentication scheme used for accounts created through SmartConsole?

Security questions

Check Point password

SecurID

RADIUS

55. Using the SmartConsole, which pre-defined Permission Profile should be assigned to an administrator that requires full access to audit all configurations without modifying them?

Editor

Read Only All

Super User

Full Access

56. Packages and licenses are loaded from all of these sources EXCEPT

Download Center Web site

UserUpdate

User Center

Check Point DVD

57. Which of the following technologies extracts detailed information from packets and stores that information in state tables?

INSPECT Engine

Stateful Inspection

Packet Filtering

Application Layer Firewall

58. On the following graphic, you will find layers of policies.

What is a precedence of traffic inspection for the defined polices?

A packet arrives at the gateway, it is checked against the rules in the networks policy layer and then if Implicit Drop Rule drops the packet, it comes next to IPS layer and then after accepting the packet it passes to Threat Prevention layer.

A packet arrives at the gateway, it is checked against the rules in the networks policy layer and then if there is any rule which accepts the packet, it comes next to IPS layer and then after accepting the packet it passes to Threat Prevention layer

A packet arrives at the gateway, it is checked against the rules in the networks policy layer and then if there is any rule which accepts the packet, it comes next to Threat Prevention layer and then after accepting the packet it passes to IPS layer.

A packet arrives at the gateway, it is checked against the rules in IPS policy layer and then if it is accepted then it comes next to the Network policy layer and then after accepting the packet it passes to Threat Prevention layer.

59. Tina is a new administrator who is currently reviewing the new Check Point R80 Management console interface.

In the Gateways view, she is reviewing the Summary screen as in the screenshot below.

What as an 'Open Server'?

Check Point software deployed on a non-Check Point appliance.

The Open Server Consortium approved Server Hardware used for the purpose of Security and Availability.

A Check Point Management Server deployed using the Open Systems Interconnection (OSI) Server and Security deployment model.

A Check Point Management Server software using the Open SS

60. Choose what BEST describes the Policy Layer Traffic Inspection.

If a packet does not match any of the inline layers, the matching continues to the next Layer.

If a packet matches an inline layer, it will continue matching the next layer.

If a packet does not match any of the inline layers, the packet will be matched against the Implicit Clean-up Rule.

If a packet does not match a Network Policy Layer, the matching continues to its inline layer.

Page 7 of 14

61. What are the three conflict resolution rules in the Threat Prevention Policy Layers?

Conflict on action, conflict on exception, and conflict on settings

Conflict on scope, conflict on settings, and conflict on exception

Conflict on settings, conflict on address, and conflict on exception

Conflict on action, conflict on destination, and conflict on settings

62. What does the “unknown” SIC status shown on SmartConsole mean?

The SMS can contact the Security Gateway but cannot establish Secure Internal Communication.

SIC activation key requires a reset.

The SIC activation key is not known by any administrator.

There is no connection between the Security Gateway and SM

63. Kofi, the administrator of the ALPHA Corp network wishes to change the default Gaia WebUI Portal port number currently set on the default HTTPS port.

Which CLISH commands are required to be able to change this TCP port?

A. set web ssl-port <new port number>

B. set Gaia-portal port <new port number>

C. set Gaia-portal https-port <new port number>

D. set web https-port <new port number>

64. Browser-based Authentication sends users to a web page to acquire identities using ________ .

User Directory

Captive Portal and Transparent Kerberos Authentication

Captive Portal

UserCheck

65. Which default Gaia user has full read/write access?

Monitor

Altuser

Administrator

Superuser

66. The _________ collects logs and sends them to the _________ .

Log server; security management server

Log server; Security Gateway

Security management server; Security Gateway

Security Gateways; log server

67. The security Gateway is installed on GAiA R80. The default port for the WEB User Interface is _______ .

TCP 18211

TCP 257

TCP 4433

TCP 443

68. To build an effective Security Policy, use a ________ and _______ rule.

Cleanup; stealth

Stealth; implicit

Cleanup; default

Implicit; explicit

69. Which type of Check Point license is tied to the IP address of a specific Security Gateway and cannot be transferred to a gateway that has a different IP address?

Central

Corporate

Formal

Local

70. Which utility shows the security gateway general system information statistics like operating system information and resource usage, and individual software blade statistics of VPN, Identity Awareness and DLP?

cpconfig

fw ctl pstat

cpview

fw ctl multik stat

Page 8 of 14

71. The following graphic shows:

View from SmartLog for logs initiated from source address 10.1.1.202

View from SmartView Tracker for logs of destination address 10.1.1.202

View from SmartView Tracker for logs initiated from source address 10.1.1.202

View from SmartView Monitor for logs initiated from source address 10.1.1.202

72. In R80, Unified Policy is a combination of

Access control policy, QoS Policy, Desktop Security Policy and endpoint policy.

Access control policy, QoS Policy, Desktop Security Policy and Threat Prevention Policy.

Firewall policy, address Translation and application and URL filtering, QoS Policy, Desktop Security Policy and Threat Prevention Policy.

Access control policy, QoS Policy, Desktop Security Policy and VPN policy.

73. The command __________ provides the most complete restoration of a R80 configuration.

upgrade_import

cpconfig

fwm dbimport -p <export file>

cpinfo -recover

74. The Gaia operating system supports which routing protocols?

BGP, OSPF, RIP

BGP, OSPF, EIGRP, PIM, IGMP

BGP, OSPF, RIP, PIM, IGMP

BGP, OSPF, RIP, EIGRP

75. Joey wants to configure NTP on R80 Security Management Server. He decided to do this via WebUI.

What is the correct IP address and default port to access the Web UI for Gaia platform via browser?

https://<Device_IP_Address>

https://<Device_IP_Address>:443

https://<Device_IP_Address>:10000

https://<Device_IP_Address>:4434

76. Which application should you use to install a contract file?

SmartView Monitor

WebUI

SmartUpdate

SmartProvisioning

77. Which feature is NOT provided by all Check Point Mobile Access solutions?

Support for IPv6

Granular access control

Strong user authentication

Secure connectivity

78. You work as a security administrator for a large company. CSO of your company has attended a security conference where he has learnt how hackers constantly modify their strategies and techniques to evade detection and reach corporate resources. He wants to make sure that his company has the right protections in place. Check Point has been selected for the security vendor.

Which Check Point products protects BEST against malware and zero-day attacks while ensuring quick delivery of safe content to your users?

IPS and Application Control

IPS, anti-virus and anti-bot

IPS, anti-virus and e-mail security

SandBlast

79. Each cluster has __________ interfaces.

Five

Two

Three

Four

80. What are the three essential components of the Check Point Security Management Architecture?

SmartConsole, Security Management Server, Security Gateway

SmartConsole, SmartUpdate, Security Gateway

Security Management Server, Security Gateway, Command Line Interface

WebUI, SmartConsole, Security Gateway

Page 9 of 14

81. Which of the following is NOT an integral part of VPN communication within a network?

VPN key

VPN community

VPN trust entities

VPN domain

82. Two administrators Dave and Jon both manage R80 Management as administrators for ABC Corp. Jon logged into the R80 Management and then shortly after Dave logged in to the same server. They are both in the Security Policies view.

From the screenshots below, why does Dave not have the rule no.6 in his SmartConsole view even though Jon has it his in his SmartConsole view?

Jon is currently editing rule no.6 but has Published part of his changes.

Dave is currently editing rule no.6 and has marked this rule for deletion.

Dave is currently editing rule no.6 and has deleted it from his Rule Base.

Jon is currently editing rule no.6 but has not yet Published his changes.

83. Vanessa is firewall administrator in her company; her company is using Check Point firewalls on central and remote locations, which are managed centrally by R80 Security Management Server. One central location has an installed R77.30 Gateway on Open server. Remote location is using Check Point UTM-1 570 series appliance with R71.

Which encryption is used in Secure Internal Communication (SIC) between central management and firewall on each location?

On central firewall AES128 encryption is used for SIC, on Remote firewall 3DES encryption is used for SI

On both firewalls, the same encryption is used for SI

This is AES-GCM-256.

The Firewall Administrator can choose which encryption suite will be used by SI

On central firewall AES256 encryption is used for SIC, on Remote firewall AES128 encryption is used for SI

84. Review the following screenshot and select the BEST answer.

Data Center Layer is an inline layer in the Access Control Policy.

By default all layers are shared with all policies.

If a connection is dropped in Network Layer, it will not be matched against the rules in Data Center Layer.

If a connection is accepted in Network-layer, it will not be matched against the rules in Data Center Layer.

85. Which of the following is NOT a SecureXL traffic flow?

Medium Path

Accelerated Path

Fast Path

Slow Path

86. Which of the following Automatically Generated Rules NAT rules have the lowest implementation priority?

Machine Hide NAT

Address Range Hide NAT

Network Hide NAT

Machine Static NAT

87. Fill in the blanks: VPN gateways authenticate using ___________ and ___________ .

Passwords; tokens

Certificates; pre-shared secrets

Certificates; passwords

Tokens; pre-shared secrets

88. In R80 spoofing is defined as a method of:

Disguising an illegal IP address behind an authorized IP address through Port Address Translation.

Hiding your firewall from unauthorized users.

Detecting people using false or wrong authentication logins

Making packets appear as if they come from an authorized IP address.

89. Fill in the blank: The __________ is used to obtain identification and security information about network users.

User Directory

User server

UserCheck

User index

90. Which Check Point feature enables application scanning and the detection?

Application Dictionary

AppWiki

Application Library

CPApp

Page 10 of 14

91. DLP and Geo Policy are examples of what type of Policy?

Standard Policies

Shared Policies

Inspection Policies

Unified Policies

92. In which deployment is the security management server and Security Gateway installed on the same appliance?

Bridge Mode

Remote

Standalone

Distributed

93. Fill in the blank: A _________ VPN deployment is used to provide remote users with secure access to internal corporate resources by authenticating the user through an internet browser.

Clientless remote access

Clientless direct access

Client-based remote access

Direct access

94. Which of the following statements is TRUE about R80 management plug-ins?

The plug-in is a package installed on the Security Gateway.

Installing a management plug-in requires a Snapshot, just like any upgrade process.

A management plug-in interacts with a Security Management Server to provide new features and support for new products.

Using a plug-in offers full central management only if special licensing is applied to specific features of the plug-in.

95. Fill in the blank: Gaia can be configured using the _______ or ______ .

Gaia; command line interface

WebUI; Gaia Interface

Command line interface; WebUI

Gaia Interface; GaiaUI

96. Where can you trigger a failover of the cluster members?

Log in to Security Gateway CLI and run command clusterXL_admin down.

In SmartView Monitor right-click the Security Gateway member and select Cluster member down.

Log into Security Gateway CLI and run command cphaprob down.

1, 2, and 3

2 and 3

1 and 2

1 and 3

97. Which utility allows you to configure the DHCP service on GAIA from the command line?

ifconfig

dhcp_cfg

sysconfig

cpconfig

98. Which VPN routing option uses VPN routing for every connection a satellite gateway handles?

To satellites through center only

To center only

To center and to other satellites through center

To center, or through the center to other satellites, to internet and other VPN targets

99. Which product correlates logs and detects security threats, providing a centralized display of potential attack patterns from all network devices?

SmartView Monitor

SmartEvent

SmartUpdate

SmartDashboard

100. What will be the effect of running the following command on the Security Management Server?

Remove the installed Security Policy.

Remove the local ACL lists.

No effect.

Reset SIC on all gateways.

Page 11 of 14

101. An administrator is creating an IPsec site-to-site VPN between his corporate office and branch office. Both offices are protected by Check Point Security Gateway managed by the same Security Management Server. While configuring the VPN community to specify the pre-shared secret the administrator found that the check box to enable pre-shared secret is shared and cannot be enabled.

Why does it not allow him to specify the pre-shared secret?

IPsec VPN blade should be enabled on both Security Gateway.

Pre-shared can only be used while creating a VPN between a third party vendor and Check Point Security Gateway.

Certificate based Authentication is the only authentication method available between two Security Gateway managed by the same SM

The Security Gateways are pre-R75.40.

102. ABC Corp., and have recently returned from a training course on Check Point's new advanced R80 management platform. You are presenting an in-house R80 Management to the other administrators in ABC Corp.

How will you describe the new “Publish” button in R80 Management Console?

The Publish button takes any changes an administrator has made in their management session, publishes a copy to the Check Point of R80, and then saves it to the R80 database.

The Publish button takes any changes an administrator has made in their management session and publishes a copy to the Check Point Cloud of R80 and but does not save it to the R80

The Publish button makes any changes an administrator has made in their management session visible to all other administrator sessions and saves it to the Database.

The Publish button makes any changes an administrator has made in their management session visible to the new Unified Policy session and saves it to the Database.

103. Which of the following ClusterXL modes uses a non-unicast MAC address for the cluster IP address?

High Availability

Load Sharing Multicast

Load Sharing Pivot

Master/Backup

104. Fill in the blank: With the User Directory Software Blade, you can create R80 user definitions on a(an) ___________ Server.

NT domain

SMTP

LDAP

SecurID

105. Which of the following is NOT a component of a Distinguished Name?

Organization Unit

Country

Common name

User container

106. What are the three authentication methods for SIC?

Passwords, Users, and standards-based SSL for the creation of security channels

Certificates, standards-based SSL for the creation of secure channels, and 3DES or AES128 for encryption

Packet Filtering, certificates, and 3DES or AES128 for encryption

Certificates, Passwords, and Tokens

107. You have enabled “Full Log” as a tracking option to a security rule.

However, you are still not seeing any data type information.

What is the MOST likely reason?

Logging has disk space issues. Change logging storage options on the logging server or Security Management Server properties and install database.

Data Awareness is not enabled.

Identity Awareness is not enabled.

Logs are arriving from Pre-R80 gateways.

108. What is the order of NAT priorities?

Static NAT, IP pool NAT, hide NAT

IP pool NAT, static NAT, hide NAT

Static NAT, automatic NAT, hide NAT

Static NAT, hide NAT, IP pool NAT

109. Which of the following is an identity acquisition method that allows a Security Gateway to identify Active Directory users and computers?

UserCheck

Active Directory Query

Account Unit Query

User Directory Query

110. Ken wants to obtain a configuration lock from other administrator on R80 Security Management Server. He can do this via WebUI or a via CLI.

Which command should be use in CLI? Choose the correct answer.

remove database lock

The database feature has one command lock database override.

override database lock

The database feature has two commands: lock database override and unlock database. Both will work.

Page 12 of 14

111. Examine the following Rule Base.

What can we infer about the recent changes made to the Rule Base?

Rule 7 was created by the 'admin' administrator in the current session

8 changes have been made by administrators since the last policy installation

The rules 1, 5 and 6 cannot be edited by the 'admin' administrator

Rule 1 and object webserver are locked by another administrator

112. ALPHA Corp has a new administrator who logs into the Gaia Portal to make some changes.

He realizes that even though he has logged in as an administrator, he is unable to make any changes because all configuration options are greyed out as shown in the screenshot image below.

What is the likely cause for this?

The Gaia /bin/confd is locked by another administrator from a SmartConsole session.

The database is locked by another administrator SSH session.

The Network address of his computer is in the blocked hosts.

The IP address of his computer is not in the allowed hosts.

113. Administrator Kofi has just made some changes on his Management Server and then clicks on the Publish button in SmartConsole but then gets the error message shown in the screenshot below.

Where can the administrator check for more information on these errors?

The Log and Monitor section in SmartConsole

The Validations section in SmartConsole

The Objects section in SmartConsole

The Policies section in SmartConsole

114. You are working with multiple Security Gateways enforcing an extensive number of rules. To simplify security administration, which action would you choose?

Eliminate all possible contradictory rules such as the Stealth or Cleanup rules.

Create a separate Security Policy package for each remote Security Gateway.

Create network object that restrict all applicable rules to only certain networks.

Run separate SmartConsole instances to login and configure each Security Gateway directly.

115. Harriet wants to protect sensitive information from intentional loss when users browse to a specific URL: https://personal.mymail.com, which blade will she enable to achieve her goal?

DLP

SSL Inspection

Application Control

URL Filtering

116. To optimize Rule Base efficiency, the most hit rules should be where?

Removed from the Rule Base.

Towards the middle of the Rule Base.

Towards the top of the Rule Base.

Towards the bottom of the Rule Base.

117. Which of the following is NOT a license activation method?

SmartConsole Wizard

Online Activation

License Activation Wizard

Offline Activation

118. Which policy type has its own Exceptions section?

Thread Prevention

Access Control

Threat Emulation

Desktop Security

119. By default, which port does the WebUI listen on?

4434

443

8080

120. When doing a Stand-Alone Installation, you would install the Security Management Server with which other Check Point architecture component?

None, Security Management Server would be installed by itself.

SmartConsole

SecureClient

Security Gateway

Page 13 of 14

121. Which options are given on features, when editing a Role on Gaia Platform?

Read/Write, Read Only

Read/Write, Read only, None

Read/Write, None

Read Only, None

122. What is the default time length that Hit Count Data is kept?

3 month

4 weeks

12 months

6 months

123. Choose the Best place to find a Security Management Server backup file named backup_fw, on a Check Point Appliance.

/var/log/Cpbackup/backups/backup/backup_fw.tgs

/var/log/Cpbackup/backups/backup/backup_fw.tar

/var/log/Cpbackup/backups/backups/backup_fw.tar

/var/log/Cpbackup/backups/backup_fw.tgz

124. With which command can you view the running configuration of Gaia-based system.

show conf-active

show configuration active

show configuration

show running-configuration

125. Which of the following is TRUE regarding Gaia command line?

Configuration changes should be done in mgmt_cli and use CLISH for monitoring, Expert mode is used only for OS level tasks.

Configuration changes should be done in expert-mode and CLISH is used for monitoring.

Configuration changes should be done in mgmt-cli and use expert-mode for OS-level tasks.

All configuration changes should be made in CLISH and expert-mode should be used for OS-level tasks.

126. If there are two administrators logged in at the same time to the SmartConsole, and there are objects locked for editing, what must be done to make them available to other administrators? Choose the BEST answer.

Publish or discard the session.

Revert the session.

Save and install the Policy.

Delete older versions of database.

127. Which one of the following is the preferred licensing model? Select the Best answer.

Local licensing because it ties the package license to the IP-address of the gateway and has no dependency of the Security Management Server.

Central licensing because it ties the package license to the IP-address of the Security Management Server and has no dependency of the gateway.

Local licensing because it ties the package license to the MAC-address of the gateway management interface and has no Security Management Server dependency.

Central licensing because it ties the package license to the MAC-address of the Security Management Server Mgmt-interface and has no dependency of the gateway.

128. Tom has been tasked to install Check Point R80 in a distributed deployment.

Before Tom installs the systems this way, how many machines will he need if he does NOT include a SmartConsole machine in his calculations?

One machine, but it needs to be installed using SecurePlatform for compatibility purposes.

One machine

Two machines

Three machines

129. Fill in the blank: A new license should be generated and installed in all of the following situations EXCEPT when ________.

The license is attached to the wrong Security Gateway

The existing license expires

The license is upgraded

The IP address of the Security Management or Security Gateway has changed

130. What is the default shell for the command line interface?

Expert

Clish

Admin

Normal

Page 14 of 14

131. When you upload a package or license to the appropriate repository in SmartUpdate, where is the package or license stored

Security Gateway

Check Point user center

Security Management Server

SmartConsole installed device

132. Fill in the blank: The tool _______ generates a R80 Security Gateway configuration report.

infoCP

infoview

cpinfo

fw cpinfo

133. Which of the following commands can be used to remove site-to-site IPSEC Security Associations (SA)?

vpn tu

vpn ipsec remove -l

vpn debug ipsec

fw ipsec tu

134. Which of the following is NOT an authentication scheme used for accounts created through SmartConsole?

Security questions

Check Point password

SecurID

RADIUS

135. Which pre-defined Permission Profile should be assigned to an administrator that requires full access to audit all configurations without modifying them?

Auditor

Read Only All

Super User

Full Access

136. Packages and licenses are loaded from all of these sources EXCEPT

Download Center Web site

UserUpdate

User Center

Check Point DVD

137. Which of the following technologies extracts detailed information from packets and stores that information in state tables?

INSPECT Engine

Stateful Inspection

Packet Filtering

Application Layer Firewall

138. On the following graphic, you will find layers of policies.

What is a precedence of traffic inspection for the defined polices?

A packet arrives at the gateway, it is checked against the rules in the networks policy layer and then if implicit Drop Rule drops the packet, it comes next to IPS layer and then after accepting the packet it passes to Threat Prevention layer.

A packet arrives at the gateway, it is checked against the rules in IPS policy layer and then it comes next to the Network policy layer and then after accepting the packet it passes to Threat Prevention layer.

139. Tina is a new administrator who is currently reviewing the new Check Point R80 Management console interface.

In the Gateways view, she is reviewing the Summary screen as in the screenshot below.

What as an 'Open Server'?

Check Point software deployed on a non-Check Point appliance.

The Open Server Consortium approved Server Hardware used for the purpose of Security and Availability.

A check Point Management Server deployed using the Open Systems Interconnection (OSI) Server and Security deployment model.

A check Point Management Server software using the Open SS

140. Choose what BEST describes the Policy Layer Traffic Inspection.

If a packet does not match any of the inline layers, the matching continues to the next Layer.

If a packet matches an inline layer, it will continue matching the next layer.

If a packet does not match any of the inline layers, the packet will be matched against the Implicit Clean-up Rule.

If a packet does not match a Network Policy Layer, the matching continues to its inline layer.