لا تريد أن تفوت شيئا؟

نصائح اجتياز امتحان الشهادة

آخر أخبار الامتحانات ومعلومات الخصم

برعاية وحديثة من قبل خبرائنا

نعم، أرسل لي النشرة الإخبارية

خذ اختبارات أخرى عبر الإنترنت

السؤال #1
Can multiple administrators connect to a Security Management Server at the same time?
A. No, only one can be connected
B. Yes, all administrators can modify a network object at the same time
C. Yes, every administrator has their own username, and works in a session that is independent of other administrators
D. Yes, but only one has the right to write
عرض الإجابة
اجابة صحيحة: C
السؤال #2
What is the difference between an event and a log?
A. Events are generated at gateway according to Event Policy
B. A log entry becomes an event when it matches any rule defined in Event Policy
C. Events are collected with SmartWorkflow form Trouble Ticket systems
D. Log and Events are synonyms
عرض الإجابة
اجابة صحيحة: A
السؤال #3
What happen when IPS profile is set in Detect Only Mode for troubleshooting?
A. It will generate Geo-Protection traffic
B. Automatically uploads debugging logs to Check Point Support Center
C. It will not block malicious traffic
D. Bypass licenses requirement for Geo-Protection control
عرض الإجابة
اجابة صحيحة: C
السؤال #4
fwssd is a child process of which of the following Check Point daemons?
A. fwd
B. cpwd
C. fwm
D. cpd
عرض الإجابة
اجابة صحيحة: B
السؤال #5
When an encrypted packet is decrypted, where does this happen?
A. Security policy
B. Inbound chain
C. Outbound chain
D. Decryption is not supported
عرض الإجابة
اجابة صحيحة: D
السؤال #6
Customer’s R80 management server needs to be upgraded to R80.10. What is the best upgrade method when the management server is not connected to the Internet?
A. Export R80 configuration, clean install R80
B. CPUSE offline upgrade
C. CPUSE online upgrade
D. SmartUpdate upgrade
عرض الإجابة
اجابة صحيحة: C
السؤال #7
In which VPN community is a satellite VPN gateway not allowed to create a VPN tunnel with another satellite VPN gateway?
A. Pentagon
B. Combined
C. Meshed
D. Star
عرض الإجابة
اجابة صحيحة: D
السؤال #8
Which one of the following is true about Capsule Connect?
A. It is a full layer 3 VPN client
B. It offers full enterprise mobility management
C. It is supported only on iOS phones and Windows PCs
D. It does not support all VPN authentication methods
عرض الإجابة
اجابة صحيحة: A
السؤال #9
What is the purpose of a SmartEvent Correlation Unit?
A. The SmartEvent Correlation Unit is designed to check the connection reliability from SmartConsole to the SmartEvent Server
B. The SmartEvent Correlation Unit’s task it to assign severity levels to the identified events
C. The Correlation unit role is to evaluate logs from the log server component to identify patterns/threats and convert them to events
D. The SmartEvent Correlation Unit is designed to check the availability of the SmartReporter Server
عرض الإجابة
اجابة صحيحة: D
السؤال #10
The log server sends what to the Correlation Unit?
A. Authentication requests
B. CPMI dbsync
C. Logs
D. Event Policy
عرض الإجابة
اجابة صحيحة: D
السؤال #11
Which Check Point software blades could be enforced under Threat Prevention profile using Check Point R80.10 SmartConsole application?
A. IPS, Anti-Bot, URL Filtering, Application Control, Threat Emulation
B. Firewall, IPS, Threat Emulation, Application Control
C. IPS, Anti-Bot, Anti-Virus, Threat Emulation, Threat Extraction
D. Firewall, IPS, Anti-Bot, Anti-Virus, Threat Emulation
عرض الإجابة
اجابة صحيحة: C
السؤال #12
Which command shows detailed information about VPN tunnels?
A. cat $FWDIR/conf/vpn
B. vpn tu tlist
C. vpn tu
D. cpview
عرض الإجابة
اجابة صحيحة: D
السؤال #13
Office mode means that:
A. SecurID client assigns a routable MAC addres
B. After the user authenticates for a tunnel, the VPN gateway assigns a routable IP address to the remote client
C. Users authenticate with an Internet browser and use secure HTTPS connection
D. Local ISP (Internet service Provider) assigns a non-routable IP address to the remote user
E. Allows a security gateway to assign a remote client an IP addres
F. After the user authenticates for a tunnel, the VPN gateway assigns a routable IP address to the remote client
عرض الإجابة
اجابة صحيحة: A
السؤال #14
Traffic from source 192.168.1.1 is going to www.google.com. The Application Control Blade on the gateway is inspecting the traffic. Assuming acceleration is enabled which path is handling the traffic?
A. Slow Path
B. Medium Path
C. Fast Path
D. Accelerated Path
عرض الإجابة
اجابة صحيحة: B
السؤال #15
What is the Implicit Clean-up Rule?
A. A setting is defined in the Global Properties for all policies
B. A setting that is configured per Policy Layer
C. Another name for the Clean-up Rule
D. Automatically created when the Clean-up Rule is defined
عرض الإجابة
اجابة صحيحة: B
السؤال #16
Which CLI command will reset the IPS pattern matcher statistics?
A. ips reset pmstat
B. ips pstats reset
C. ips pmstats refresh
D. ips pmstats reset
عرض الإجابة
اجابة صحيحة: B
السؤال #17
The Firewall kernel is replicated multiple times, therefore:
A. The Firewall kernel only touches the packet if the connection is accelerated
B. The Firewall can run different policies per core
C. The Firewall kernel is replicated only with new connections and deletes itself once the connection times out
D. The Firewall can run the same policy on all cores
عرض الإجابة
اجابة صحيحة: D
السؤال #18
To help SmartEvent determine whether events originated internally or externally you must define using the Initial Settings under General Settings in the Policy Tab. How many options are available to calculate the traffic direction?
A. 5 Network; Host; Objects; Services; API
B. 3 Incoming; Outgoing; Network
C. 2 Internal; External
D. 4 Incoming; Outgoing; Internal; Other
عرض الإجابة
اجابة صحيحة: D
السؤال #19
In the Firewall chain mode FFF refers to:
A. Stateful Packets
B. No Match
C. All Packets
D. Stateless Packets
عرض الإجابة
اجابة صحيحة: C
السؤال #20
What is the order of NAT priorities?
A. Static NAT, IP pool NAT, hide NAT
B. IP pool NAT, static NAT, hide NAT
C. Static NAT, automatic NAT, hide NAT
D. Static NAT, hide NAT, IP pool NAT
عرض الإجابة
اجابة صحيحة: B
السؤال #21
During the Check Point Stateful Inspection Process, for packets that do not pass Firewall Kernel Inspection and are rejected by the rule definition, packets are:
A. Dropped without sending a negative acknowledgment
B. Dropped without logs and without sending a negative acknowledgment
C. Dropped with negative acknowledgment
D. Dropped with logs and without sending a negative acknowledgment
عرض الإجابة
اجابة صحيحة: A
السؤال #22
Which command is used to set the CCP protocol to Multicast?
A. cphaprob set_ccp multicast
B. cphaconf set_ccp multicast
C. cphaconf set_ccp no_broadcast
D. cphaprob set_ccp no_broadcast
عرض الإجابة
اجابة صحيحة: A

عرض الإجابات بعد التقديم

يرجى إرسال البريد الإلكتروني الخاص بك والواتس اب للحصول على إجابات الأسئلة.

ملحوظة: يرجى التأكد من صلاحية معرف البريد الإلكتروني وWhatsApp حتى تتمكن من الحصول على نتائج الاختبار الصحيحة.

بريد إلكتروني:
رقم الواتس اب/الهاتف: