NEW QUESTION 1
When setting up an externally managed log server, what is one item that will not be configured on the R80 Security Management Server?

• A. IP
• B. SIC
• C. NAT
• D. FQDN

Answer: C

NEW QUESTION 2
With MTA (Mail Transfer Agent) enabled the gateways manages SMTP traffic and holds external email with potentially malicious attachments. What is required in order to enable MTA (Mail Transfer Agent) functionality in the Security Gateway?

• A. Threat Cloud Intelligence
• B. Threat Prevention Software Blade Package
• C. Endpoint Total Protection
• D. Traffic on port 25

Answer: B

NEW QUESTION 3
GAiA Software update packages can be imported and installed offline in situation where:

• A. Security Gateway with GAiA does NOT have SFTP access to Internet
• B. Security Gateway with GAiA does NOT have access to Internet.
• C. Security Gateway with GAiA does NOT have SSH access to Internet.
• D. The desired CPUSE package is ONLY available in the Check Point CLOUD.

Answer: B

NEW QUESTION 4
Which command shows detailed information about VPN tunnels?

• A. cat $FWDIR/conf/vpn.conf
• B. vpn tu tlist
• C. vpn tu
• D. cpview

Answer: B

NEW QUESTION 5
Which command is used to add users to or from existing roles?

• A. Add rba user <User Name> roles <List>
• B. Add rba user <User Name>
• C. Add user <User Name> roles <List>
• D. Add user <User Name>

Answer: A

NEW QUESTION 6
When attempting to start a VPN tunnel, in the logs the error “no proposal chosen” is seen numerous times. No other VPN-related entries are present.
Which phase of the VPN negotiations has failed?

• A. IKE Phase 1
• B. IPSEC Phase 2
• C. IPSEC Phase 1
• D. IKE Phase 2

Answer: A

NEW QUESTION 7
To ensure that VMAC mode is enabled, which CLI command should you run on all cluster members?

• A. fw ctl set int fwha vmac global param enabled
• B. fw ctl get int vmac global param enabled; result of command should return value 1
• C. cphaprob-a if
• D. fw ctl get int fwha_vmac_global_param_enabled; result of command should return value 1

Answer: D

NEW QUESTION 8
SandBlast agent extends 0 day prevention to what part of the network?

• A. Web Browsers and user devices
• B. DMZ server
• C. Cloud
• D. Email servers

Answer: A

NEW QUESTION 9
Which application should you use to install a contract file?

• A. SmartView Monitor
• B. WebUI
• C. SmartUpdate
• D. SmartProvisioning

Answer: C

NEW QUESTION 10
What is the order of NAT priorities?

• A. Static NAT, IP pool NAT, hide NAT
• B. IP pool NAT, static NAT, hide NAT
• C. Static NAT, automatic NAT, hide NAT
• D. Static NAT, hide NAT, IP pool NAT

Answer: A

NEW QUESTION 11
Which Mobile Access Application allows a secure container on Mobile devices to give users access to internal website, file share and emails?

• A. Check Point Remote User
• B. Check Point Capsule Workspace
• C. Check Point Mobile Web Portal
• D. Check Point Capsule Remote

Answer: C

NEW QUESTION 12
Using mgmt_cli, what is the correct syntax to import a host object called Server_1 from the CLI?

• A. mgmt_cli add-host “Server_1” ip_address “10.15.123.10” --format txt
• B. mgmt_cli add host name “Server_1” ip-address “10.15.123.10” --format json
• C. mgmt_cli add object-host “Server_1” ip-address “10.15.123.10” --format json
• D. mgmt._cli add object “Server-1” ip-address “10.15.123.10” --format json

Answer: B

Explanation:
Example:
mgmt_cli add host name "New Host 1" ip-address "192.0.2.1" --format json
• "--format json" is optional. By default the output is presented in plain text. References:

NEW QUESTION 13
Tom has connected to the R80 Management Server remotely using SmartConsole and is in the process of making some Rule Base changes, when he suddenly loses connectivity. Connectivity is restored shortly afterward.
What will happen to the changes already made?

• A. Tom’s changes will have been stored on the Management when he reconnects and he will not lose any of his work.
• B. Tom will have to reboot his SmartConsole computer, and access the Management cache store on that computer, which is only accessible after a reboot.
• C. Tom’s changes will be lost since he lost connectivity and he will have to start again.
• D. Tom will have to reboot his SmartConsole computer, clear to cache, and restore changes.

Answer: A

NEW QUESTION 14
On R80.10 when configuring Third-Party devices to read the logs using the LEA (Log Export API) the default Log Server uses port:

• A. 18210
• B. 18184
• C. 257
• D. 18191

Answer: B

NEW QUESTION 15
Fill in the blanks: Gaia can be configured using the ________ or _______.

• A. GaiaUI; command line interface
• B. WebUI; Gaia Interface
• C. Command line interface; WebUI
• D. Gaia Interface; GaiaUI

Answer: C

NEW QUESTION 16
Which CLI command will reset the IPS pattern matcher statistics?

• A. ips reset pmstat
• B. ips pstats reset
• C. ips pmstats refresh
• D. ips pmstats reset

Answer: D

NEW QUESTION 17
Check Point Management (cpm) is the main management process in that it provides the architecture for a consolidated management console. It empowers the migration from legacy Client-side logic to Server-side logic. The cpm process:

• A. Allow GUI Client and management server to communicate via TCP Port 19001
• B. Allow GUI Client and management server to communicate via TCP Port 18191
• C. Performs database tasks such as creating, deleting, and modifying objects and compiling policy.
• D. Performs database tasks such as creating, deleting, and modifying objects and compiling as well as policy code generation.

Answer: C

NEW QUESTION 18
You have successfully backed up Check Point configurations without the OS information. What command would you use to restore this backup?

• A. restore_backup
• B. import backup
• C. cp_merge
• D. migrate import

Answer: D

NEW QUESTION 19
Where you can see and search records of action done by R80 SmartConsole administrators?

• A. In SmartView Tracker, open active log
• B. In the Logs & Monitor view, select “Open Audit Log View”
• C. In SmartAuditLog View
• D. In Smartlog, all logs

Answer: B

NEW QUESTION 20
How long may verification of one file take for Sandblast Threat Emulation?

• A. up to 1 minutes
• B. within seconds cleaned file will be provided
• C. up to 5 minutes
• D. up to 3 minutes

Answer: B

NEW QUESTION 21
When Dynamic Dispatcher is enabled, connections are assigned dynamically with the exception of:

• A. Threat Emulation
• B. HTTPS
• C. QOS
• D. VoIP

Answer: D

NEW QUESTION 22
Fill in the blanks: A ________ license requires an administrator to designate a gateway for attachment whereas a ________ license is automatically attached to a Security Gateway.

• A. Formal; corporate
• B. Local; formal
• C. Local; central
• D. Central; local

Answer: D

NEW QUESTION 23
What kind of information would you expect to see using the sim affinity command?

• A. The VMACs used in a Security Gateway cluster
• B. The involved firewall kernel modules in inbound and outbound packet chain
• C. Overview over SecureXL templated connections
• D. Network interfaces and core distribution used for CoreXL

Answer: D

NEW QUESTION 24
VPN Link Selection will perform the following when the primary VPN link goes down?

• A. The Firewall will drop the packets.
• B. The Firewall can update the Link Selection entries to start using a different link for the same tunnel.
• C. The Firewall will send out the packet on all interfaces.
• D. The Firewall will inform the client that the tunnel is down.

Answer: B

NEW QUESTION 25
Which command collects diagnostic data for analyzing customer setup remotely?

• A. cpinfo
• B. migrate export
• C. sysinfo
• D. cpview

Answer: A

Explanation:
CPInfo is an auto-updatable utility that collects diagnostics data on a customer's machine at the time of execution and uploads it to Check Point servers (it replaces the standalone cp_uploader utility for uploading files to Check Point servers).
The CPInfo output file allows analyzing customer setups from a remote location. Check Point support engineers can open the CPInfo file in a demo mode, while viewing actual customer Security Policies and Objects. This allows the in-depth analysis of customer's configuration and environment settings.

NEW QUESTION 26
Fill in the blank. Once a certificate is revoked from the Security Gateway by the Security Management Server, the certificate information is ______ .

• A. Sent to the Internal Certificate Authority.
• B. Sent to the Security Administrator.
• C. Stored on the Security Management Server.
• D. Stored on the Certificate Revocation List.

Answer: D

NEW QUESTION 27
Which is the least ideal Synchronization Status for Security Management Server High Availability deployment?

• A. Synchronized
• B. Never been synchronized
• C. Lagging
• D. Collision

Answer: D

NEW QUESTION 28
......