NEW QUESTION 1
On R80.10 when configuring Third-Party devices to read the logs using the LEA (Log Export API) the default Log Server uses port:

• A. 18210
• B. 18184
• C. 257
• D. 18191

Answer: B

NEW QUESTION 2
How do you enable virtual mac (VMAC) on-the-fly on a cluster member?

• A. cphaprob set int fwha_vmac_global_param_enabled 1
• B. clusterXL set int fwha_vmac_global_param_enabled 1
• C. fw ctl set int fwha_vmac_global_param_enabled 1
• D. cphaconf set int fwha_vmac_global_param_enabled 1

Answer: C

NEW QUESTION 3
Which is NOT a SmartEvent component?

• A. SmartEvent Server
• B. Correlation Unit
• C. Log Consolidator
• D. Log Server

Answer: C

NEW QUESTION 4
Please choose correct command to add an “emailserver1” host with IP address 10.50.23.90 using GAiA management CLI?

• A. host name myHost12 ip-address 10.50.23.90
• B. mgmt: add host name ip-address 10.50.23.90
• C. add host name emailserver1 ip-address 10.50.23.90
• D. mgmt: add host name emailserver1 ip-address 10.50.23.90

Answer: D

NEW QUESTION 5
Which is NOT an example of a Check Point API?

• A. Gateway API
• B. Management API
• C. OPSEC SDK
• D. Threat Prevention API

Answer: A

NEW QUESTION 6
Which command would disable a Cluster Member permanently?

• A. clusterXL_admin down
• B. cphaprob_admin down
• C. clusterXL_admin down-p
• D. set clusterXL down-p

Answer: C

NEW QUESTION 7
John is using Management HA. Which Smartcenter should be connected to for making changes?

• A. secondary Smartcenter
• B. active Smartenter
• C. connect virtual IP of Smartcenter HA
• D. primary Smartcenter

Answer: B

NEW QUESTION 8
With MTA (Mail Transfer Agent) enabled the gateways manages SMTP traffic and holds external email with potentially malicious attachments. What is required in order to enable MTA (Mail Transfer Agent) functionality in the Security Gateway?

• A. Threat Cloud Intelligence
• B. Threat Prevention Software Blade Package
• C. Endpoint Total Protection
• D. Traffic on port 25

Answer: B

NEW QUESTION 9
Fill in the blank: Permanent VPN tunnels can be set on all tunnels in the community, on all tunnels for specific gateways, or ________.

• A. On all satellite gateway to satellite gateway tunnels
• B. On specific tunnels for specific gateways
• C. On specific tunnels in the community
• D. On specific satellite gateway to central gateway tunnels

Answer: C

NEW QUESTION 10
Which of the following is NOT an option to calculate the traffic direction?

• A. Incoming
• B. Internal
• C. External
• D. Outgoing

Answer: D

NEW QUESTION 11
What information is NOT collected from a Security Gateway in a Cpinfo?

• A. Firewall logs
• B. Configuration and database files
• C. System message logs
• D. OS and network statistics

Answer: A

NEW QUESTION 12
What CLI command compiles and installs a Security Policy on the target’s Security Gateways?

• A. fwm compile
• B. fwm load
• C. fwm fetch
• D. fwm install

Answer: B

NEW QUESTION 13
What is the command to see cluster status in cli expert mode?

• A. fw ctl stat
• B. clusterXL stat
• C. clusterXL status
• D. cphaprob stat

Answer: D

NEW QUESTION 14
The essential means by which state synchronization works to provide failover in the event an active member goes down, _______ is used specifically for clustered environments to allow gateways to report their own state and learn about the states of other members in the cluster.

• A. ccp
• B. cphaconf
• C. cphad
• D. cphastart

Answer: A

NEW QUESTION 15
John detected high load on sync interface. Which is most recommended solution?

• A. For short connections like http service – delay sync for 2 seconds
• B. Add a second interface to handle sync traffic
• C. For short connections like http service – do not sync
• D. For short connections like icmp service – delay sync for 2 seconds

Answer: A

NEW QUESTION 16
Which SmartConsole tab is used to monitor network and security performance?

• A. Manage Setting
• B. Security Policies
• C. Gateway and Servers
• D. Logs and Monitor

Answer: D

NEW QUESTION 17
As an administrator, you may be required to add the company logo to reports. To do this, you would save the logo as a PNG file with the name ‘cover-company-logo.png’ and then copy that image file to which directory on the SmartEvent server?

• A. SFWDIR/smartevent/conf
• B. $RTDIR/smartevent/conf
• C. $RTDIR/smartview/conf
• D. $FWDIR/smartview/conf

Answer: C

NEW QUESTION 18
Tom has been tasked to install Check Point R80 in a distributed deployment. Before Tom installs the systems this way, how many machines will he need if he does NOT include a SmartConsole machine in his calculations?

• A. One machine, but it needs to be installed using SecurePlatform for compatibility purposes.
• B. One machine
• C. Two machines
• D. Three machines

Answer: C

Explanation:
One for Security Management Server and the other one for the Security Gateway.

NEW QUESTION 19
......