NEW QUESTION 1
You can access the ThreatCloud Repository from:

• A. R80.10 SmartConsole and Application Wiki
• B. Threat Prevention and Threat Tools
• C. Threat Wiki and Check Point Website
• D. R80.10 SmartConsole and Threat Prevention

Answer: D

NEW QUESTION 2
With Mobile Access enabled, administrators select the web-based and native applications that can be accessed by remote users and define the actions that users can perform the applications. Mobile Access encrypts all traffic using:

• A. HTTPS for web-based applications and 3DES or RC4 algorithm for native application
• B. For end users to access the native applications, they need to install the SSL Network Extender.
• C. HTTPS for web-based applications and AES or RSA algorithm for native application
• D. For end users to access the native application, they need to install the SSL Network Extender.
• E. HTTPS for web-based applications and 3DES or RC4 algorithm for native application
• F. For end users to access the native applications, no additional software is required.
• G. HTTPS for web-based applications and AES or RSA algorithm for native application
• H. For end users to access the native application, no additional software is required.

Answer: A

NEW QUESTION 3
Which statement is correct about the Sticky Decision Function?

• A. It is not supported with either the Performance pack of a hardware based accelerator card
• B. Does not support SPI’s when configured for Load Sharing
• C. It is automatically disabled if the Mobile Access Software Blade is enabled on the cluster
• D. It is not required L2TP traffic

Answer: A

NEW QUESTION 4
What two ordered layers make up the Access Control Policy Layer?

• A. URL Filtering and Network
• B. Network and Threat Prevention
• C. Application Control and URL Filtering
• D. Network and Application Control

Answer: D

NEW QUESTION 5
Check Pont Central Deployment Tool (CDT) communicates with the Security Gateway / Cluster Members over Check Point SIC _______ .

• A. TCP Port 18190
• B. TCP Port 18209
• C. TCP Port 19009
• D. TCP Port 18191

Answer: D

NEW QUESTION 6
What command verifies that the API server is responding?

• A. api stat
• B. api status
• C. show api_status
• D. app_get_status

Answer: B

NEW QUESTION 7
Which features are only supported with R80.10 Gateways but not R77.x?

• A. Access Control policy unifies the Firewall, Application Control & URL Filtering, Data Awareness, and Mobile Access Software Blade policies.
• B. Limits the upload and download throughput for streaming media in the company to 1 Gbps.
• C. The rule base can be built of layers, each containing a set of the security rule
• D. Layers are inspected in the order in which they are defined, allowing control over the rule base flow and which security functionalities take precedence.
• E. Time object to a rule to make the rule active only during specified times.

Answer: C

NEW QUESTION 8
Which of the following is NOT a type of Check Point API available in R80.10?

• A. Identity Awareness Web Services
• B. OPSEC SDK
• C. Mobile Access
• D. Management

Answer: C

NEW QUESTION 9
Fill in the blank: An identity server uses a ______ for user authentication.

• A. Shared secret
• B. Certificate
• C. One-time password
• D. Token

Answer: A

NEW QUESTION 10
How many layers make up the TCP/IP model?

• A. 2
• B. 7
• C. 6
• D. 4

Answer: D

NEW QUESTION 11
What needs to be configured if the NAT property ‘Translate destination or client side’ is not enabled in Global Properties?

• A. A host route to route to the destination IP.
• B. Use the file local.arp to add the ARP entries for NAT to work.
• C. Nothing, the Gateway takes care of all details necessary.
• D. Enabling ‘Allow bi-directional NAT’ for NAT to work correctly.

Answer: C

NEW QUESTION 12
Which of the following Check Point processes within the Security Management Server is responsible for the receiving of log records from Security Gateway?

• A. logd
• B. fwd
• C. fwm
• D. cpd

Answer: B

NEW QUESTION 13
When users connect to the Mobile Access portal they are unable to open File Shares. Which log file would you want to examine?

• A. cvpnd.elg
• B. httpd.elg
• C. vpnd.elg
• D. fw.elg

Answer: A

NEW QUESTION 14
What is the valid range for Virtual Router Identifier (VRID) value in a Virtual Routing Redundancy Protocol (VRRP) configuration?

• A. 1-254
• B. 1-255
• C. 0-254
• D. 0 – 255

Answer: B

NEW QUESTION 15
The SmartEvent R80 Web application for real-time event monitoring is called:

• A. SmartView Monitor
• B. SmartEventWeb
• C. There is no Web application for SmartEvent
• D. SmartView

Answer: B

NEW QUESTION 16
Which of the following technologies extracts detailed information from packets and stores that information in state tables?

• A. INSPECT Engine
• B. Stateful Inspection
• C. Packet Filtering
• D. Application Layer Firewall

Answer: A

NEW QUESTION 17
Which of the following statements is TRUE about R80 management plug-ins?

• A. The plug-in is a package installed on the Security Gateway.
• B. Installing a management plug-in requires a Snapshot, just like any upgrade process.
• C. A management plug-in interacts with a Security Management Server to provide new features and support for new products.
• D. Using a plug-in offers full central management only if special licensing is applied to specific features of the plug-in.

Answer: C

NEW QUESTION 18
What is mandatory for ClusterXL to work properly?

• A. The number of cores must be the same on every participating cluster node
• B. The Magic MAC number must be unique per cluster node
• C. The Sync interface must not have an IP address configured
• D. If you have “Non-monitored Private” interfaces, the number of those interfaces must be the same on all cluster members

Answer: B

NEW QUESTION 19
......