السؤال #1

To quickly review when Threat Prevention signatures were last updated, which Threat Tool would an administrator use?

A. Protections

B. IPS Protections

C. Profiles

D. ThreatWiki

عرض الإجابة

اجابة صحيحة: B

السؤال #2

Which of the following are types of VPN communicaties?

A. Pentagon, star, and combination

B. Star, octagon, and combination

C. Combined and star

D. Meshed, star, and combination

عرض الإجابة

اجابة صحيحة: D

السؤال #3

Which is NOT an encryption algorithm that can be used in an IPSEC Security Association (Phase 2)?

A. AES-GCM-256

B. AES-CBC-256

C. AES-GCM-128

D. DES

عرض الإجابة

اجابة صحيحة: B

السؤال #4

Which application should you use to install a contract file?

A. SmartView Monitor

B. WebUI

C. SmartUpdate

D. SmartProvisioning

عرض الإجابة

اجابة صحيحة: C

السؤال #5

Joey wants to configure NTP on R80 Security Management Server. He decided to do this via WebUI. What is the correct address to access the Web UI for Gaia platform via browser?

A. https://

B. https://:443

C. https://:10000

D. https://:4434

عرض الإجابة

اجابة صحيحة: A

السؤال #6

When Identity Awareness is enabled, which identity source(s) is(are) used for Application Control?

A. RADIUS

B. Remote Access and RADIUS

C. All of the above

D. AD Query and Browser-based Authentication

عرض الإجابة

اجابة صحيحة: D

السؤال #7

Examine the sample Rule Base. What will be the result of a verification of the policy from SmartConsole?

A. No errors or Warnings

B. Verification Error: Empty Source-List and Service-List in Rule 5 (Mail Inbound)

C. Verification Error: Rule 4 (Web Inbound) hides Rule 6 (Webmaster access)

D. Verification Error: Rule 7 (Clean-Up Rule) hides Implicit Clean-up Rule

عرض الإجابة

اجابة صحيحة: C

السؤال #8

ALPHA Corp has a new administrator who logs into the Gaia Portal to make some changes. He realizes that even though he has logged in as an administrator, he is unable to make any changes because all configuration options are greyed out as shown in the screenshot image below. What is the likely cause for this?

A. The Gaia /bin/confd is locked by another administrator from a SmartConsole session

B. The database is locked by another administrator SSH session

C. The Network address of his computer is in the blocked hosts

D. The IP address of his computer is not in the allowed hosts

عرض الإجابة

اجابة صحيحة: B

السؤال #9

Which two Identity Awareness commands are used to support identity sharing?

A. Policy Decision Point (PDP) and Policy Enforcement Point (PEP)

B. Policy Enforcement Point (PEP) and Policy Manipulation Point (PMP)

C. Policy Manipulation Point (PMP) and Policy Activation Point (PAP)

D. Policy Activation Point (PAP) and Policy Decision Point (PDP)

عرض الإجابة

اجابة صحيحة: A

السؤال #10

There are ________ types of software containers ________.

A. Three; security management, Security Gateway, and endpoint security

B. Three; Security gateway, endpoint security, and gateway management

C. Two; security management and endpoint security

D. Two; endpoint security and Security Gateway

عرض الإجابة

اجابة صحيحة: A

السؤال #11

What does the “unknown” SIC status shown on SmartConsole mean?

A. The SMS can contact the Security Gateway but cannot establish Secure Internal Communication

B. SIC activation key requires a reset

C. The SIC activation key is not known by any administrator

D. There is no connection between the Security Gateway and SMS

عرض الإجابة

اجابة صحيحة: D

السؤال #12

The destination server for Security Gateway logs depends on a Security Management Server configuration.

A. False, log servers are configured on the Log Server General Properties

B. True, all Security Gateways will only forward logs with a SmartCenter Server configuration

C. True, all Security Gateways forward logs automatically to the Security Management Server

D. False, log servers are enabled on the Security Gateway General Properties

عرض الإجابة

اجابة صحيحة: B

السؤال #13

Which repositories are installed on the Security Management Server by SmartUpdate?

A. License and Update

B. Package Repository and Licenses

C. Update and License & Contract

D. License & Contract and Package Repository

عرض الإجابة

اجابة صحيحة: D

السؤال #14

When should you generate new licenses?

A. Before installing contract files

B. After an RMA procedure when the MAC address or serial number of the appliance changes

C. When the existing license expires, license is upgraded, or the IP-address where the license is tied changes

D. Only when the license is upgraded

عرض الإجابة

اجابة صحيحة: B

السؤال #15

Which of the following is TRUE regarding Gaia command line?

A. Configuration changes should be done in mgmt_cli and use CLISH for monitoring

B. Configuration changes should be done in expert-mode and CLISH is used for monitoring

C. Configuration changes should be done in mgmt-cli and use expert-mode for OS-level tasks

D. All configuration changes should be made in CLISH and expert-mode should be used for OS-level tasks

عرض الإجابة

اجابة صحيحة: D

السؤال #16

By default, which port does the WebUI listen on?

A. 80

B. 4434

C. 443

D. 8080

عرض الإجابة

اجابة صحيحة: C

السؤال #17

You are the Check Point administrator for Alpha Corp. You received a call that one of the users is unable to browse the Internet on their new tablet which is connected to the company wireless, which goes through a Check Point Gateway. How would you review the logs to see what is blocking this traffic?

A. Open SmartLog and connect remotely to the wireless controller

B. Open SmartEvent to see why they are being blocked

C. Open SmartDashboard and review the logs tab

D. Open SmartLog and filter for the IP address of the tablet

عرض الإجابة

اجابة صحيحة: D

السؤال #18

Which pre-defined Permission Profile should be assigned to an administrator that requires full access to audit all configurations without modifying them?

A. Editor

B. Read Only All

C. Super User

D. Full Access

عرض الإجابة

اجابة صحيحة: B

السؤال #19

What protocol is specifically used for clustered environments?

A. Cluster Protocol

B. Synchronized Cluster Protocol

C. Control Cluster Protocol

D. Cluster Control Protocol

عرض الإجابة

اجابة صحيحة: D

السؤال #20

Ken wants to obtain a configuration lock from other administrator on R80 Security Management Server. He can do this via WebUI or via CLI. Which command should he use in CLI? Choose the correct answer.

A. remove database lock

B. The database feature has one command lock database override

C. override database lock

D. The database feature has two commands: lock database override and unlock database

عرض الإجابة

اجابة صحيحة: D

السؤال #21

Which of the following is NOT an authentication scheme used for accounts created through SmartConsole?

A. Security questions

B. Check Point password

C. SecurID

D. RADIUS

عرض الإجابة

اجابة صحيحة: A

السؤال #22

You have enabled “Full Log” as a tracking option to a security rule. However, you are still not seeing any data type information. What is the MOST likely reason?

A. Logging has disk space issues

B. Data Awareness is not enabled

C. Identity Awareness is not enabled

D. Logs are arriving from Pre-R80 gateways

عرض الإجابة

اجابة صحيحة: A

السؤال #23

Which of the following is NOT a role of the SmartCenter:

A. Status monitoring

B. Policy configuration

C. Certificate authorityD

عرض الإجابة

اجابة صحيحة: C

السؤال #24

Default port numbers for an LDAP server is ______ for standard connections and _______ SSL connections.

A. 675, 389

B. 389, 636

C. 636, 290

D. 290, 675

عرض الإجابة

اجابة صحيحة: B

السؤال #25

Tom has connected to the R80 Management Server remotely using SmartConsole and is in the process of making some Rule Base changes, when he suddenly loses connectivity. Connectivity is restored shortly afterward. What will happen to the changes already made?

A. Tom’s changes will have been stored on the Management when he reconnects and he will not lose any of this work

B. Tom will have to reboot his SmartConsole computer, and access the Management cache store on that computer, which is only accessible after a reboot

C. Tom’s changes will be lost since he lost connectivity and he will have to start again

D. Tom will have to reboot his SmartConsole computer, clear the cache and restore changes

عرض الإجابة

اجابة صحيحة: A

السؤال #26

Which of the following is NOT a valid deployment option for R80?

A. All-in-one (stand-alone)

B. CloudGuard

C. Distributed

D. Bridge Mode

عرض الإجابة

اجابة صحيحة: B

السؤال #27

Which of the following is NOT a component of Check Point Capsule?

A. Capsule Docs

B. Capsule Cloud

C. Capsule Enterprise

D. Capsule Workspace

عرض الإجابة

اجابة صحيحة: C

السؤال #28

Packages and licenses are loaded from all of these sources EXCEPT

A. Download Center Web site

B. UserUpdate

C. User Center

D. Check Point DVD

عرض الإجابة

اجابة صحيحة: B

السؤال #29

Kofi, the administrator of the ALPHA Corp network wishes to change the default Gaia WebUI Portal port number currently set on the default HTTPS port. Which CLISH commands are required to be able to change this TCP port?

A. set web ssl-port

B. set Gaia-portal port

C. set Gaia-portal https-port

D. set web https-port

عرض الإجابة

اجابة صحيحة: A

السؤال #30

Which of the following commands can be used to remove site-to-site IPSEC Security Associations (SA)?

A. vpn tu

B. vpn ipsec remove -l

C. vpn debug ipsec

D. fw ipsec tu

عرض الإجابة

اجابة صحيحة: A

السؤال #31

What is the order of NAT priorities?

A. Static NAT, IP pool NAT, hide NAT

B. IP pool NAT, static NAT, hide NAT

C. Static NAT, automatic NAT, hide NAT

D. Static NAT, hide NAT, IP pool NAT

عرض الإجابة

اجابة صحيحة: A

لا تريد أن تفوت شيئا؟

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع!
احصل الان

عرض الإجابات بعد التقديم

لا تريد أن تفوت شيئا؟

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع! احصل الان

عرض الإجابات بعد التقديم

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع!
احصل الان