NEW QUESTION 1
What will SmartEvent automatically define as events?

• A. Firewall
• B. VPN
• C. IPS
• D. HTTPS

Answer: C

NEW QUESTION 2
Using Threat Emulation technologies, what is the best way to block .exe and .bat file types?

• A. enable DLP and select.exe and .bat file type
• B. enable .exe & .bat protection in IPS Policy
• C. create FW rule for particular protocol
• D. tecli advanced attributes set prohibited_file_types exe.bat

Answer: A

NEW QUESTION 3
You have created a rule at the top of your Rule Base to permit Guest Wireless access to the Internet. However, when guest users attempt to reach the Internet, they are not seeing the splash page to accept your Terms of Service, and cannot access the Internet. How can you fix this?

• A. Right click Accept in the rule, select “More”, and then check ‘Enable Identity Captive Portal’.
• B. On the firewall object, Legacy Authentication screen, check ‘Enable Identity Captive Portal’.
• C. In the Captive Portal screen of Global Properties, check ‘Enable Identity Captive Portal’.
• D. On the Security Management Server object, check the box ‘Identity Logging’.

Answer: A

NEW QUESTION 4
What are the two high availability modes?

• A. Load Sharing and Legacy
• B. Traditional and New
• C. Active and Standby
• D. New and Legacy

Answer: D

Explanation:
ClusterXL has four working modes. This section briefly describes each mode and its relative advantages and disadvantages.

NEW QUESTION 5
Which of these is an implicit MEP option?

• A. Primary-backup
• B. Source address based
• C. Round robin
• D. Load Sharing

Answer: A

NEW QUESTION 6
Which of the following commands shows the status of processes?

• A. cpwd_admin -l
• B. cpwd -l
• C. cpwd admin_list
• D. cpwd_admin list

Answer: D

NEW QUESTION 7
Which of the following links will take you to the SmartView web application?

• A. https://<Security Management Server host name>/smartviewweb/
• B. https://<Security Management Server IP Address>/smartview/
• C. https://<Security Management Server host name>smartviewweb
• D. https://<Security Management Server IP Address>/smartview

Answer: B

NEW QUESTION 8
What is the recommended configuration when the customer requires SmartLog indexing for 14 days and SmartEvent to keep events for 180 days?

• A. Use Multi-Domain Management Server.
• B. Choose different setting for log storage and SmartEvent db
• C. Install Management and SmartEvent on different machines.
• D. it is not possible.

Answer: B

NEW QUESTION 9
Which of the following authentication methods ARE NOT used for Mobile Access?

• A. RADIUS server
• B. Username and password (internal, LDAP)
• C. SecurID
• D. TACACS+

Answer: D

NEW QUESTION 10
What is true about VRRP implementations?

• A. VRRP membership is enabled in cpconfig
• B. VRRP can be used together with ClusterXL, but with degraded performance
• C. You cannot have a standalone deployment
• D. You cannot have different VRIDs in the same physical network

Answer: C

NEW QUESTION 11
Which of the following will NOT affect acceleration?

• A. Connections destined to or originated from the Security gateway
• B. A 5-tuple match
• C. Multicast packets
• D. Connections that have a Handler (ICMP, FTP, H.323, etc.)

Answer: B

NEW QUESTION 12
What can we infer about the recent changes made to the Rule Base?

• A. Rule 7 was created by the ‘admin’ administrator in the current session
• B. 8 changes have been made by administrators since the last policy installation
• C. The rules 1, 5 and 6 cannot be edited by the ‘admin’ administrator
• D. Rule 1 and object webserver are locked by another administrator

Answer: D

NEW QUESTION 13
Fill in the blanks: Gaia can be configured using the ________ or _______.

• A. GaiaUI; command line interface
• B. WebUI; Gaia Interface
• C. Command line interface; WebUI
• D. Gaia Interface; GaiaUI

Answer: C

NEW QUESTION 14
When configuring SmartEvent Initial settings, you must specify a basic topology for SmartEvent to help it calculate traffic direction for events. What is this setting called and what are you defining?

• A. Network, and defining your Class A space
• B. Topology, and you are defining the Internal network
• C. Internal addresses you are defining the gateways
• D. Internal network(s) you are defining your networks

Answer: B

NEW QUESTION 15
Selecting an event displays its configurable properties in the Detail pane and a description of the event in the Description pane. Which is NOT an option to adjust or configure?

• A. Severity
• B. Automatic reactions
• C. Policy
• D. Threshold

Answer: C

NEW QUESTION 16
You want to store the GAIA configuration in a file for later reference. What command should you use?

• A. write mem <filename>
• B. show config –f <filename>
• C. save config –o <filename>
• D. save configuration <filename>

Answer: D

NEW QUESTION 17
During the Check Point Stateful Inspection Process, for packets that do not pass Firewall Kernel Inspection and are rejected by the rule definition, packets are:

• A. Dropped without sending a negative acknowledgment
• B. Dropped without logs and without sending a negative acknowledgment
• C. Dropped with negative acknowledgment
• D. Dropped with logs and without sending a negative acknowledgment

Answer: D

NEW QUESTION 18
To help SmartEvent determine whether events originated internally or externally you must define using the Initial Settings under General Settings in the Policy Tab. How many options are available to calculate the traffic direction?

• A. 5 Network; Host; Objects; Services; API
• B. 3 Incoming; Outgoing; Network
• C. 2 Internal; External
• D. 4 Incoming; Outgoing; Internal; Other

Answer: D

NEW QUESTION 19
......