NEW QUESTION 1
After a new Log Server is added to the environment and the SIC trust has been established with the SMS what will the gateways do?

• A. The gateways can only send logs to an SMS and cannot send logs to a Log Serve
• B. Log Servers are proprietary log archive servers.
• C. Gateways will send new firewall logs to the new Log Server as soon as the SIC trust is set up between the SMS and the new Log Server.
• D. The firewalls will detect the new Log Server after the next policy install and redirect the new logs to the new Log Server.
• E. Logs are not automatically forwarded to a new Log Serve
• F. SmartConsole must be used to manually configure each gateway to send its logs to the server.

Answer: D

Explanation:
https://sc1.checkpoint.com/documents/SMB_R80.20/AdminGuides/Locally_Managed/EN/Content/Topics/Conf https://sc1.checkpoint.com/documents/SMB_R80.20/AdminGuides/Locally_Managed/EN/Content/Topics/Conf

NEW QUESTION 2
DLP and Geo Policy are examples of what type of Policy?

• A. Inspection Policies
• B. Shared Policies
• C. Unified Policies
• D. Standard Policies

Answer: B

Explanation:
https://sc1.checkpoint.com/documents/R80.30/WebAdminGuides/EN/CP_R80.30_NextGenSecurityGateway_G

NEW QUESTION 3
Which application is used for the central management and deployment of licenses and packages?

• A. SmartProvisioning
• B. SmartLicense
• C. SmartUpdate
• D. Deployment Agent

Answer: C

NEW QUESTION 4
Which path below is available only when CoreXL is enabled?

• A. Slow path
• B. Firewall path
• C. Medium path
• D. Accelerated path

Answer: C

NEW QUESTION 5
What are the advantages of a “shared policy” in R80?

• A. Allows the administrator to share a policy between all the users identified by the Security Gateway
• B. Allows the administrator to share a policy between all the administrators managing the Security Management Server
• C. Allows the administrator to share a policy so that it is available to use in another Policy Package
• D. Allows the administrator to install a policy on one Security Gateway and it gets installed on another managed Security Gateway

Answer: C

Explanation:
Ref: https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_SecurityManagement_AdminGuide

NEW QUESTION 6
Fill in the blank: Authentication rules are defined for ______.

• A. User groups
• B. Users using UserCheck
• C. Individual users
• D. All users in the database

Answer: A

NEW QUESTION 7
Rugged appliances are small appliances with ruggedized hardware and like Quantum Spark appliance they use which operating system?

• A. Centos Linux
• B. Gaia embedded
• C. Gaia
• D. Red Hat Enterprise Linux version 5

Answer: B

Explanation:
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=

NEW QUESTION 8
What is a reason for manual creation of a NAT rule?

• A. In R80 all Network Address Translation is done automatically and there is no need for manually defined NAT-rules.
• B. Network Address Translation of RFC1918-compliant networks is needed to access the Internet.
• C. Network Address Translation is desired for some services, but not for others.
• D. The public IP-address is different from the gateway’s external IP

Answer: D

NEW QUESTION 9
What protocol is specifically used for clustered environments?

• A. Clustered Protocol
• B. Synchronized Cluster Protocol
• C. Control Cluster Protocol
• D. Cluster Control Protocol

Answer: D

NEW QUESTION 10
How many users can have read/write access in Gaia Operating System at one time?

• A. One
• B. Three
• C. Two
• D. Infinite

Answer: A

Explanation:
if another user has r/w access, you need to use "lock database override" or "unlock database" to claim r/w access. Ref: https://sc1.checkpoint.com/documents/R80.20_GA/WebAdminGuides/EN/CP_R80.20_Gaia_AdminGuide/html

NEW QUESTION 11
Which of the following log queries would show only dropped packets with source address of 192.168.1.1 and destination address of 172.26.1.1?

• A. src:192.168.1.1 OR dst:172.26.1.1 AND action:Drop
• B. src:192.168.1.1 AND dst:172.26.1.1 AND action:Drop
• C. 192.168.1.1 AND 172.26.1.1 AND drop
• D. 192.168.1.1 OR 172.26.1.1 AND action:Drop

Answer: B

NEW QUESTION 12
An administrator can use section titles to more easily navigate between large rule bases. Which of these statements is FALSE?

• A. Section titles are not sent to the gateway side.
• B. These sections are simple visual divisions of the Rule Base and do not hinder the order of rule enforcement.
• C. A Sectional Title can be used to disable multiple rules by disabling only the sectional title.
• D. Sectional Titles do not need to be created in the SmartConsole.

Answer: C

Explanation:
Section titles are only for visual categorization of rules.

NEW QUESTION 13
Which of the following is NOT a method used by Identity Awareness for acquiring identity?

• A. Remote Access
• B. Cloud IdP (Identity Provider)
• C. Active Directory Query
• D. RADIUS

Answer: B

Explanation:
https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_IdentityAwareness_AdminGuide/T

NEW QUESTION 14
Session unique identifiers are passed to the web api using which http header option?

• A. X-chkp-sid
• B. Accept-Charset
• C. Proxy-Authorization
• D. Application

Answer: C

NEW QUESTION 15
What does it mean if Deyra sees the gateway status:

Choose the BEST answer.

• A. SmartCenter Server cannot reach this Security Gateway
• B. There is a blade reporting a problem
• C. VPN software blade is reporting a malfunction
• D. Security Gateway’s MGNT NIC card is disconnected.

Answer: B

Explanation:

NEW QUESTION 16
When dealing with rule base layers, what two layer types can be utilized?

• A. Ordered Layers and Inline Layers
• B. Inbound Layers and Outbound Layers
• C. R81.10 does not support Layers
• D. Structured Layers and Overlap Layers

Answer: A

Explanation:
https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_SecurityManagement_AdminGuide

NEW QUESTION 17
How is communication between different Check Point components secured in R80? As with all questions, select the best answer.

• A. By using IPSEC
• B. By using SIC
• C. By using ICA
• D. By using 3DES

Answer: B

NEW QUESTION 18
A stateful inspection firewall works by registering connection data and compiling this information. Where is the information stored?

• A. In the system SMEM memory pool.
• B. In State tables.
• C. In the Sessions table.
• D. In a CSV file on the firewall hard drive located in $FWDIR/conf/.

Answer: B

Explanation:
The information stored in the state tables provides cumulative data that can be used to evaluate future connections......
https://www.checkpoint.com/cyber-hub/network-security/what-is-firewall/what-is-a-stateful-firewall/

NEW QUESTION 19
......