NEW QUESTION 1
What is the default shell for the command line interface?

• A. Expert
• B. Clish
• C. Admin
• D. Normal

Answer: B

Explanation:
The default shell of the CLI is called clish

NEW QUESTION 2
What scenario indicates that SecureXL is enabled?

• A. Dynamic objects are available in the Object Explorer
• B. SecureXL can be disabled in cpconfig
• C. fwaccel commands can be used in clish
• D. Only one packet in a stream is seen in a fw monitor packet capture

Answer: C

NEW QUESTION 3
Fill in the blank: Permanent VPN tunnels can be set on all tunnels in the community, on all tunnels for specific gateways, or ________.

• A. On all satellite gateway to satellite gateway tunnels
• B. On specific tunnels for specific gateways
• C. On specific tunnels in the community
• D. On specific satellite gateway to central gateway tunnels

Answer: C

NEW QUESTION 4
Using ClusterXL, what statement is true about the Sticky Decision Function?

• A. Can only be changed for Load Sharing implementations
• B. All connections are processed and synchronized by the pivot
• C. Is configured using cpconfig
• D. Is only relevant when using SecureXL

Answer: A

NEW QUESTION 5
Which of the following is NOT a component of Check Point Capsule?

• A. Capsule Docs
• B. Capsule Cloud
• C. Capsule Enterprise
• D. Capsule Workspace

Answer: C

NEW QUESTION 6
You have existing dbedit scripts from R77. Can you use them with R80.10?

• A. dbedit is not supported in R80.10
• B. dbedit is fully supported in R80.10
• C. You can use dbedit to modify threat prevention or access policies, but not create or modify layers
• D. dbedit scripts are being replaced by mgmt_cli in R80.10

Answer: D

NEW QUESTION 7
Which of the following is an identity acquisition method that allows a Security Gateway to identify Active Directory users and computers?

• A. UserCheck
• B. Active Directory Query
• C. Account Unit Query
• D. User Directory Query

Answer: B

Explanation:
Reference : https://sc1.checkpoint.com/documents/R76/CP_R76_IdentityAwareness_AdminGuide/62402.htm

NEW QUESTION 8
How do Capsule Connect and Capsule Workspace differ?

• A. Capsule Connect provides a Layer3 VP
• B. Capsule Workspace provides a Desktop with usable applications.
• C. Capsule Workspace can provide access to any application.
• D. Capsule Connect provides Business data isolation.
• E. Capsule Connect does not require an installed application at client.

Answer: A

NEW QUESTION 9
Which of these statements describes the Check Point ThreatCloud?

• A. Blocks or limits usage of web applications
• B. Prevents or controls access to web sites based on category
• C. Prevents Cloud vulnerability exploits
• D. A worldwide collaborative security network

Answer: D

NEW QUESTION 10
Which one of the following is true about Threat Emulation?

• A. Takes less than a second to complete
• B. Works on MS Office and PDF files only
• C. Always delivers a file
• D. Takes minutes to complete (less than 3 minutes)

Answer: D

NEW QUESTION 11
In Logging and Monitoring, the tracking options are Log, Detailed Log and Extended Log. Which of the following options can you add to each Log, Detailed Log and Extended Log?

• A. Accounting
• B. Suppression
• C. Accounting/Suppression
• D. Accounting/Extended

Answer: C

NEW QUESTION 12
SandBlast appliances can be deployed in the following modes:

• A. using a SPAN port to receive a copy of the traffic only
• B. detect only
• C. inline/prevent or detect
• D. as a Mail Transfer Agent and as part of the traffic flow only

Answer: C

NEW QUESTION 13
What is the correct command to observe the Sync traffic in a VRRP environment?

• A. fw monitor –e “accept[12:4,b]=224.0.0.18;”
• B. fw monitor –e “accept port(6118;”
• C. fw monitor –e “accept proto=mcVRRP;”
• D. fw monitor –e “accept dst=224.0.0.18;”

Answer: D

NEW QUESTION 14
Which SmartConsole tab is used to monitor network and security performance?

• A. Manage Setting
• B. Security Policies
• C. Gateway and Servers
• D. Logs and Monitor

Answer: D

NEW QUESTION 15
Fill in the blank: The IPS policy for pre-R80 gateways is installed during the _______ .

• A. Firewall policy install
• B. Threat Prevention policy install
• C. Anti-bot policy install
• D. Access Control policy install

Answer: C

Explanation:
https://sc1.checkpoint.com/documents/R80/CP_R80BC_ThreatPrevention/html_frameset.htm?topic=documents

NEW QUESTION 16
Which software blade does NOT accompany the Threat Prevention policy?

• A. Anti-virus
• B. IPS
• C. Threat Emulation
• D. Application Control and URL Filtering

Answer: D

NEW QUESTION 17
......