NEW QUESTION 1

Which one is not a valid Package Option In the Web GUI for CPUSE?

• A. Clean Install
• B. Export Package
• C. Upgrade
• D. Database Conversion to R81.10 only

Answer: B

NEW QUESTION 2

What command verifies that the API server is responding?

• A. api stat
• B. api status
• C. show api_status
• D. app_get_status

Answer: B

NEW QUESTION 3

Which of the SecureXL templates are enabled by default on Security Gateway?

• A. Accept
• B. Drop
• C. NAT
• D. None

Answer: D

NEW QUESTION 4

Pamela is Cyber Security Engineer working for Global Instance Firm with large scale deployment of Check Point Enterprise Appliances using GAiA/R81.10. Company’s Developer Team is having random access issue to newly deployed Application Server in DMZ’s Application Server Farm Tier and blames DMZ Security Gateway as root cause. The ticket has been created and issue is at Pamela’s desk for an investigation. Pamela decides to use Check Point’s Packet Analyzer Tool-fw monitor to iron out the issue during approved Maintenance window.
What do you recommend as the best suggestion for Pamela to make sure she successfully captures entire traffic in context of Firewall and problematic traffic?

• A. Pamela should check SecureXL status on DMZ Security gateway and if it’s turned O
• B. She should turn OFF SecureXL before using fw monitor to avoid misleading traffic captures.
• C. Pamela should check SecureXL status on DMZ Security Gateway and if it’s turned OF
• D. She should turn ON SecureXL before using fw monitor to avoid misleading traffic captures.
• E. Pamela should use tcpdump over fw monitor tool as tcpdump works at OS-level and captures entire traffic.
• F. Pamela should use snoop over fw monitor tool as snoop works at NIC driver level and captures entire traffic.

Answer: A

NEW QUESTION 5

To accelerate the rate of connection establishment, SecureXL groups all connection that match a particular service and whose sole differentiating element is the source port. The type of grouping enables even the very first packets of a TCP handshake to be accelerated. The first packets of the first connection on the same service will be forwarded to the Firewall kernel which will then create a template of the connection. Which of the these is NOT a SecureXL template?

• A. Accept Template
• B. Deny Template
• C. Drop Template
• D. NAT Template

Answer: B

NEW QUESTION 6

SmartConsole R81 requires the following ports to be open for SmartEvent R81 management:

• A. 19090,22
• B. 19190,22
• C. 18190,80
• D. 19009,443

Answer: D

NEW QUESTION 7

Which command can you use to verify the number of active concurrent connections?

• A. fw conn all
• B. fw ctl pstat
• C. show all connections
• D. show connections

Answer: B

NEW QUESTION 8

VPN Link Selection will perform the following when the primary VPN link goes down?

• A. The Firewall will drop the packets.
• B. The Firewall can update the Link Selection entries to start using a different link for the same tunnel.
• C. The Firewall will send out the packet on all interfaces.
• D. The Firewall will inform the client that the tunnel is down.

Answer: B

NEW QUESTION 9

Which of these statements describes the Check Point ThreatCloud?

• A. Blocks or limits usage of web applications
• B. Prevents or controls access to web sites based on category
• C. Prevents Cloud vulnerability exploits
• D. A worldwide collaborative security network

Answer: D

NEW QUESTION 10

When attempting to start a VPN tunnel, in the logs the error “no proposal chosen” is seen numerous times. No other VPN-related entries are present.
Which phase of the VPN negotiations has failed?

• A. IKE Phase 1
• B. IPSEC Phase 2
• C. IPSEC Phase 1
• D. IKE Phase 2

Answer: A

NEW QUESTION 11

What statement best describes the Proxy ARP feature for Manual NAT in R81.10?

• A. Automatic proxy ARP configuration can be enabled
• B. Translate Destination on Client Side should be configured
• C. fw ctl proxy should be configured
• D. local.arp file must always be configured

Answer: D

NEW QUESTION 12

Which of the following is NOT an option to calculate the traffic direction?

• A. Incoming
• B. Internal
• C. External
• D. Outgoing

Answer: D

NEW QUESTION 13

What does the Log "Views" tab show when SmartEvent is Correlating events?

• A. A list of common reports
• B. Reports for customization
• C. Top events with charts and graphs
• D. Details of a selected logs

Answer: D

NEW QUESTION 14

Which directory below contains log files?

• A. /opt/CPSmartlog-R81/log
• B. /opt/CPshrd-R81/log
• C. /opt/CPsuite-R81/fw1/log
• D. /opt/CPsuite-R81/log

Answer: C

NEW QUESTION 15

If the Active Security Management Server fails or if it becomes necessary to change the Active to Standby, the following steps must be taken to prevent data loss. Providing the Active Security Management Server is responsive, which if these steps should NOT be performed:

• A. Rename the hostname of the Standby member to match exactly the hostname of the Active member.
• B. Change the Standby Security Management Server to Active.
• C. Change the Active Security Management Server to Standby.
• D. Manually synchronize the Active and Standby Security Management Servers.

Answer: A

NEW QUESTION 16

You can select the file types that are sent for emulation for all the Threat Prevention profiles. Each profile defines a(n) ______ or _______ action for the file types.

• A. Inspect/Bypass
• B. Inspect/Prevent
• C. Prevent/Bypass
• D. Detect/Bypass

Answer: A

NEW QUESTION 17

How many versions, besides the destination version, are supported in a Multi-Version Cluster Upgrade?

• A. 1
• B. 3
• C. 2
• D. 4

Answer: B

NEW QUESTION 18
......