NEW QUESTION 1
What Shell is required in Gaia to use WinSCP?

• A. UNIX
• B. CPShell
• C. CLISH
• D. Bash

Answer: D

NEW QUESTION 2
You are the Security Administrator for MegaCorp. A Check Point firewall is installed and in use on a platform using GAiA. You have trouble configuring the speed and duplex settings of your Ethernet interfaces. Which of the following commands can be used in CLISH to configure the speed and duplex settings of an Ethernet interface and will survive a reboot? Give the BEST answer.

• A. ethtool
• B. set interface <options>
• C. mii_tool
• D. ifconfig -a

Answer: B

NEW QUESTION 3
Fill in the blank: The R80 feature permits blocking specific IP addresses for a specified time period.

• A. Block Port Overflow
• B. Local Interface Spoofing
• C. Suspicious Activity Monitoring
• D. Adaptive Threat Prevention

Answer: C

NEW QUESTION 4
You have created a Rule Base for firewall, websydney. Now you are going to create a new policy package with security and address translation rules for a second Gateway.

What is TRUE about the new package’s NAT rules?

• A. Rules 1, 2, 3 will appear in the new package.
• B. Only rule 1 will appear in the new package.
• C. NAT rules will be empty in the new package.
• D. Rules 4 and 5 will appear in the new package.

Answer: A

NEW QUESTION 5
Which of the following commands can provide the most complete restoration of a R80 configuration?

• A. upgrade_import
• B. cpinfo -recover
• C. cpconfig
• D. fwm dbimport -p <export file>

Answer: A

NEW QUESTION 6
You cannot use SmartDashboard’s User Directory features to connect to the LDAP server. What should you investigate?
1) Verify you have read-only permissions as administrator for the operating system.
2) Verify there are no restrictions blocking SmartDashboard's User Manager from connecting to the LDAP server.
3) Check that the login Distinguished Name configured has root permission (or at least write permission Administrative access) in the LDAP Server's access control configuration.

• A. 1, 2, and 3
• B. 2 and 3
• C. 1 and 2
• D. 1 and 3

Answer: B

NEW QUESTION 7
When simulating a problem on CLusterXL cluster with cphaprob –d STOP –s problem –t 0 register, to initiate a failover on an active cluster member, what command allows you remove the problematic state?

• A. cphaprob –d STOP unregister
• B. cphaprob STOP unregister
• C. cphaprob unregister STOP
• D. cphaprob –d unregister STOP

Answer: A

Explanation: esting a failover in a controlled manner using following command;
# cphaprob -d STOP -s problem -t 0 register
This will register a problem state on the cluster member this was entered on;If you then run;
# cphaprob list
this will show an entry named STOP.
to remove this problematic register run following;
# cphaprob -d STOP unregister References:

NEW QUESTION 8
What makes Anti-Bot unique compared to other Threat Prevention mechanisms, such as URL Filtering, Anti-Virus, IPS, and Threat Emulation?

• A. Anti-Bot is the only countermeasure against unknown malware
• B. Anti-Bot is the only protection mechanism which starts a counter-attack against known Command & Control Centers
• C. Anti-Bot is the only signature-based method of malware protection
• D. Anti-Bot is a post-infection malware protection to prevent a host from establishing a connection to a Command & Control Center

Answer: D

NEW QUESTION 9
Many companies have defined more than one administrator. To increase security, only one administrator should be able to install a Rule Base on a specific Firewall. How do you configure this?

• A. Define a permission profile in SmartDashboard with read/write privileges, but restrict it to all other firewalls by placing them in the Policy Targets fiel
• B. Then, an administrator with this permission profile cannot install a policy on any Firewall not listed here.
• C. Put the one administrator in an Administrator group and configure this group in the specific Firewall object in Advanced > Permission to Install.
• D. In the object General Properties representing the specific Firewall, go to the Software Blades product list and select Firewal
• E. Right-click in the menu, select Administrator to Install to define only this administrator.
• F. Right-click on the object representing the specific administrator, and select that Firewall in Policy Targets.

Answer: B

NEW QUESTION 10
Which Check Point tool allows you to open a debug file and see the VPN packet exchange details.

• A. PacketDebug.exe
• B. VPNDebugger.exe
• C. IkeView.exe
• D. IPSECDebug.exe

Answer: C

NEW QUESTION 11
When synchronizing clusters, which of the following statements is FALSE?

• A. The state of connections using resources is maintained in a Security Server, so their connections cannot be synchronized.
• B. Only cluster members running on the same OS platform can be synchronized.
• C. In the case of a failover, accounting information on the failed member may be lost despite a properly working synchronization.
• D. Client Authentication or Session Authentication connections through a cluster member will be lost if the cluster member fails.

Answer: D

NEW QUESTION 12
Security Gateway R80 supports User Authentication for which of the following services? Select the response below that contains the MOST correct list of supported services.

• A. SMTP, FTP, TELNET
• B. SMTP, FTP, HTTP, TELNET
• C. FTP, HTTP, TELNET
• D. FTP, TELNET

Answer: C

NEW QUESTION 13
In the Rule Base displayed, user authentication in Rule 4 is configured as fully automatic. Eric is a member of the LDAP group, MSD_Group.

What happens when Eric tries to connect to a server on the Internet?

• A. None of these things will happen.
• B. Eric will be authenticated and get access to the requested server.
• C. Eric will be blocked because LDAP is not allowed in the Rule Base.
• D. Eric will be dropped by the Stealth Rule.

Answer: D

NEW QUESTION 14
A ClusterXL configuration is limited to members.

• A. There is no limit.
• B. 16
• C. 6
• D. 2

Answer: C

NEW QUESTION 15
The SmartEvent R80 Web application for real-time event monitoring is called:

• A. SmartView Monitor
• B. SmartEventWeb
• C. There is no Web application for SmartEvent
• D. SmartView

Answer: A

NEW QUESTION 16
John Adams is an HR partner in the ACME organization. ACME IT wants to limit access to HR servers to a set of designated IP addresses to minimize malware infection and unauthorized access risks. Thus, the gateway policy permits access only from John's desktop which is assigned a static IP address 10.0.0.19.
He has received a new laptop and wants to access the HR Web Server from anywhere in the organization. The IT department gave the laptop a static IP address, but that limits him to operating it only from his desk. The current Rule Base contains a rule that lets John Adams access the HR Web Server from his laptop with a static IP (10.0.0.19).
He wants to move around the organization and continue to have access to the HR Web Server. To make this scenario work, the IT administrator:
1) Enables Identity Awareness on a gateway, selects AD Query as one of the Identity Sources, and installs the policy.
2) Adds an access role object to the Firewall Rule Base that lets John Adams access the HR Web Server from
any machine and from any location and installs policy.
John plugged in his laptop to the network on a different network segment and was not able to connect to the HR Web server. What is the next BEST troubleshooting step?

• A. Investigate this as a network connectivity issue
• B. Install the Identity Awareness Agent
• C. Set static IP to DHCP
• D. After enabling Identity Awareness, reboot the gateway

Answer: C