NEW QUESTION 1
Phase 1 of the two-phase negotiation process conducted by IKE operates in ______ mode.

• A. Main
• B. Authentication
• C. Quick
• D. High Alert

Answer: A

Explanation:
Phase I modes
Between Security Gateways, there are two modes for IKE phase I. These modes only apply to IKEv1:

NEW QUESTION 2
What is the main difference between Static NAT and Hide NAT?

• A. Static NAT only allows incoming connections to protect your network.
• B. Static NAT allow incoming and outgoing connection
• C. Hide NAT only allows outgoing connections.
• D. Static NAT only allows outgoing connection
• E. Hide NAT allows incoming and outgoing connections.
• F. Hide NAT only allows incoming connections to protect your network.

Answer: B

Explanation:
Hide NAT only translates the source address to hide it behind a gateway.

NEW QUESTION 3
Which command shows the installed licenses?

• A. cplic print
• B. print cplic
• C. fwlic print
• D. show licenses

Answer: A

NEW QUESTION 4
Name the authentication method that requires token authenticator.

• A. SecureID
• B. Radius
• C. DynamicID
• D. TACACS

Answer: A

Explanation:
https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_SecurityManagement_AdminGuide

NEW QUESTION 5
What are the three components for Check Point Capsule?

• A. Capsule Docs, Capsule Cloud, Capsule Connect
• B. Capsule Workspace, Capsule Cloud, Capsule Connect
• C. Capsule Workspace, Capsule Docs, Capsule Connect
• D. Capsule Workspace, Capsule Docs, Capsule Cloud

Answer: D

NEW QUESTION 6
Which of the following is NOT an identity source used for Identity Awareness?

• A. Remote Access
• B. UserCheck
• C. AD Query
• D. RADIUS

Answer: B

NEW QUESTION 7
Customer’s R80 management server needs to be upgraded to R80.10. What is the best upgrade method when the management server is not connected to the Internet?

• A. Export R80 configuration, clean install R80.10 and import the configuration
• B. CPUSE online upgrade
• C. CPUSE offline upgrade
• D. SmartUpdate upgrade

Answer: C

NEW QUESTION 8
Fill in the blanks: A _____ license requires an administrator to designate a gateway for attachment whereas a _______ license is automatically attached to a Security Gateway.

• A. Formal; corporate
• B. Local; formal
• C. Local; central
• D. Central; local

Answer: D

NEW QUESTION 9
R80 is supported by which of the following operating systems:

• A. Windows only
• B. Gaia only
• C. Gaia, SecurePlatform, and Windows
• D. SecurePlatform only

Answer: B

NEW QUESTION 10
What kind of NAT enables Source Port Address Translation by default?

• A. Automatic Static NAT
• B. Manual Hide NAT
• C. Automatic Hide NAT
• D. Manual Static NAT

Answer: C

Explanation:
https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_SecurityManagement_AdminGuide

NEW QUESTION 11
Gaia includes Check Point Upgrade Service Engine (CPUSE), which can directly receive updates for what components?

• A. The Security Gateway (SG) and Security Management Server (SMS) software and the CPUSE engine.
• B. Licensed Check Point products for the Gala operating system and the Gaia operating system itself.
• C. The CPUSE engine and the Gaia operating system.
• D. The Gaia operating system only.

Answer: B

Explanation:
https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_Gaia_AdminGuide/Topics-GAG/C

NEW QUESTION 12
Application Control/URL filtering database library is known as:

• A. Application database
• B. AppWiki
• C. Application-Forensic Database
• D. Application Library

Answer: B

Explanation:
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=

NEW QUESTION 13
What are the three types of UserCheck messages?

• A. inform, ask, and block
• B. block, action, and warn
• C. action, inform, and ask
• D. ask, block, and notify

Answer: A

Explanation:
Inform User Inform
Shows when the action for the ruleClosed is inform. It informs users what the company policy is for that site. Blocked Message
Block
Shows when a request is blocked. Ask User
Ask
Shows when the action for the rule is ask. It informs users what the company policy is for that site and they must click OK to continue to the site.
https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_DataLossPrevention_AdminGuide/

NEW QUESTION 14
The default shell of the Gaia CLI is cli.sh. How do you change from the cli.sh shell to the advanced shell to run Linux commands?

• A. Execute the command 'enable' in the cli.sh shell
• B. Execute the 'conf t' command in the cli.sh shell
• C. Execute the command 'expert' in the cli.sh shell
• D. Execute the 'exit' command in the cli.sh shell

Answer: C

NEW QUESTION 15
Check Point licenses come in two forms. What are those forms?

• A. Central and Local.
• B. Access Control and Threat Prevention.
• C. On-premise and Public Cloud.
• D. Security Gateway and Security Management.

Answer: A

NEW QUESTION 16
How do you manage Gaia?

• A. Through CLI and WebUI
• B. Through CLI only
• C. Through SmartDashboard only
• D. Through CLI, WebUI, and SmartDashboard

Answer: D

NEW QUESTION 17
Fill in the blank: It is Best Practice to have a _____ rule at the end of each policy layer.

• A. Explicit Drop
• B. Implied Drop
• C. Explicit CleanUp
• D. Implicit Drop

Answer: C

NEW QUESTION 18
Fill in the blank: Service blades must be attached to a ________.

• A. Security Gateway
• B. Management container
• C. Management server
• D. Security Gateway container

Answer: A

NEW QUESTION 19
......