NEW QUESTION 1
Which operating systems are supported by a Check Point Security Gateway on an open server? Select MOST complete list.

• A. Sun Solaris, Red Hat Enterprise Linux, Check Point SecurePlatform, IPSO, Microsoft Windows
• B. Check Point GAiA and SecurePlatform, and Microsoft Windows
• C. Check Point GAiA, Microsoft Windows, Red Hat Enterprise Linux, Sun Solaris, IPSO
• D. Check Point GAiA and SecurePlatform, IPSO, Sun Solaris, Microsoft Windows

Answer: B

NEW QUESTION 2
Fill in the blank: The R80 utility fw monitor is used to troubleshoot .

• A. User data base corruption
• B. EDAP conflicts
• C. Traffic issues
• D. Phase two key negotiation

Answer: C

NEW QUESTION 3
Vanessa is expecting a very important Security Report. The Document should be sent as an attachment via
e-m ail. An e-mail with Security_ report.pdf file was delivered to her e-mail inbox. When she opened the PDF file, she noticed that the file is basically empty and only few lines of text are in it. The report is missing some graphs, tables and links. Which component of SandBlast protection is her company using on a Gateway?

• A. SandBlast Threat Emulation
• B. SandBlast Agent
• C. Check Point Protect
• D. SandBlast Threat Extraction

Answer: D

NEW QUESTION 4
Which Check Point address translation method allows an administrator to use fewer ISP-assigned IP addresses than the number of internal hosts requiring Internet connectivity?

• A. Hide
• B. Static Destination
• C. Static Source
• D. Dynamic Destination

Answer: A

Explanation: Topic 3, Exam Pool B

NEW QUESTION 5
Fill in the blank. The user wants to replace a failed Windows-based firewall with a new server running GAiA.
For the most complete restore of an GAiA configuration, he or she will use the command

Answer:

Explanation: migrate_import

NEW QUESTION 6
The third-shift Administrator was updating Security Management Server access settings in Global Properties and testing. He managed to lock himself out of his account. How can you unlock this account?

• A. Type fwm unlock_admin from the Security Management Server command line.
• B. Type fwm unlock_admin -u from the Security Gateway command line.
• C. Type fwm lock_admin -u <account name> from the Security Management Server command line.
• D. Delete the file admin.lock in the Security Management Server directory $FWDIR/tmp/.

Answer: C

NEW QUESTION 7
Which of the following statements is TRUE about R80 management plug-ins?

• A. The plug-in is a package installed on the Security Gateway.
• B. Installing a management plug-in requires a Snapshot, just like any upgrade process.
• C. A management plug-in interacts with a Security Management Server to provide new features and support for new products.
• D. Using a plug-in offers full central management only if special licensing is applied to specific features of the plug-in.

Answer: C

NEW QUESTION 8
How many pre-defined exclusions are included by default in SmartEvent R80 as part of the product installation?

• A. 5
• B. 10
• C. 3

Answer:

NEW QUESTION 9
Which three of the following are ClusterXL member requirements?
1) same operating systems
2) same Check Point version
3) same appliance model
4) same policy

• A. 1, 3, and 4
• B. 1, 2, and 4
• C. 2, 3, and 4
• D. 1, 2, and 3

Answer: B

NEW QUESTION 10
Which of the following statements accurately describes the command upgrade_export?

• A. upgrade_export stores network-configuration data, objects, global properties, and the database revisions prior to upgrading the Security Management Server.
• B. Used primarily when upgrading the Security Management Server, upgrade_export stores all object databases and the /conf directories for importing to a newer Security Gateway version.
• C. upgrade_export is used when upgrading the Security Gateway, and allows certain files to be included or excluded before exporting.
• D. This command is no longer supported in GAiA.

Answer: B

NEW QUESTION 11
How granular may an administrator filter an Access Role with identity awareness? Per:

• A. Specific ICA Certificate
• B. AD User
• C. Radius Group
• D. Windows Domain

Answer: B

NEW QUESTION 12
How can you check whether IP forwarding is enabled on an IP Security Appliance?

• A. clish -c show routing active enable
• B. cat /proc/sys/net/ipv4/ip_forward
• C. echo 1 > /proc/sys/net/ipv4/ip_forward
• D. ipsofwd list

Answer: D

NEW QUESTION 13
Which is the correct order of a log flow processed by SmartEvents components:

• A. Firewall > Correlation Unit > Log Server > SmartEvent Server Database > SmartEvent Client
• B. Firewall > SmartEvent Server Database > Correlation unit > Log Server > SmartEvent Client
• C. Firewall > Log Server > SmartEvent Server Database > Correlation Unit > SmartEvent Client
• D. Firewall > Log Server > Correlation Unit > SmartEvent Server Database > SmartEvent Client

Answer: D

NEW QUESTION 14
Which of these options is an implicit MEP option?

• A. Primary-backup
• B. Source address based
• C. Round robin
• D. Load Sharing

Answer: A

Explanation: There are three methods to implement implicit MEP: References:

NEW QUESTION 15
Fill in the blank. To verify that a VPN Tunnel is properly established, use the command _____

Answer:

Explanation: vpn tunnelutil

NEW QUESTION 16
When a packet is flowing through the security gateway, which one of the following is a valid inspection path?

• A. Acceleration Path
• B. Small Path
• C. Firewall Path
• D. Medium Path

Answer: D