marks4sure logo
After making modifications to the $CVPNDIR/conf/cvpnd.C file, how would you restart the daemon?
The ____ software blade package uses CPU-level and OS-level sandboxing in order to detect and block malware.
After verifying that API Server is not running, how can you start the API Server?
What is the valid range for Virtual Router Identifier (VRID) value in a Virtual Routing Redundancy Protocol (VRRP) configuration?
Which one of these features is NOT associated with the Check Point URL Filtering and Application Control Blade?
How does the Anti-Virus feature of the Threat Prevention policy block traffic from infected websites?
Besides fw monitor, what is another command that can be used to capture packets?
a. ping
B. arp
C. tcpdump
D. traceroute
You have created a rule at the top of your Rule Base to permit Guest Wireless access to the Internet. However, when guest users attempt to reach the Internet, they are not seeing the splash page to accept your Terms of Service, and cannot access the Internet. How can you fix this?
What kind of information would you expect to see using the sim affinity command?
Hit Count is a feature to track the number of connections that each rule matches, which one is not benefit of Hit Count.
For best practices, what is the recommended time for automatic unlocking of locked admin accounts?
When requiring certificates for mobile devices, make sure the authentication method is set to one of the following, Username and Password, RADIUS or ________.
What are the attributes that SecureXL will check after the connection is allowed by Security Policy?
NO: 219
What cloud-based SandBlast Mobile application is used to register new devices and users?
Matt wants to upgrade his old Security Management server to R80.x using the Advanced Upgrade with Database Migration. What is one of the requirements for a successful upgrade?
You need to change the MAC-address on eth2 interface of the gateway. What is the correct way to change MAC-address in Check Point Gaia?
Please choose the path to monitor the compliance status of the Check Point R80.10 based management.
Which VPN routing option uses VPN routing for every connection a satellite gateway handles?
When users connect to the Mobile Access portal they are unable to open File Shares.
Which log file would you want to examine?
NO: 66
You are working with multiple Security Gateways enforcing an extensive number of rules. To simplify security administration, which action would you choose?
The Firewall Administrator is required to create 100 new host objects with different IP addresses. What API command can he use in the script to achieve the requirement?
There are two R77.30 Security Gateways in the Firewall Cluster. They are named FW_A and FW_B. The cluster is configured to work as HA (High availability) with default cluster configuration. FW_A is configured to have higher priority than FW_B. FW_A was active and processing the traffic in the morning. FW_B was standby. Around 1100 am, its interfaces went down and this caused a failover. FW_B became active. After an hour, FW_A’s interface issues were resolved and it became operational.
When it re-joins the cluster, will it become active automatically?
To find records in the logs that shows log records from the Application & URL Filtering Software Blade where traffic was dropped, what would be the query syntax?
You have enabled “Full Log” as a tracking option to a security rule. However, you are still not seeing any data type information. What is the MOST likely reason?
What CLI command compiles and installs a Security Policy on the target’s Security Gateways?
Ken wants to obtain a configuration lock from other administrator on R80 Security Management Server. He can do this via WebUI or via CLI.
Which command should he use in CLI? (Choose the correct answer.)
SandBlast offers flexibility in implementation based on their individual business needs. What is an option for deployment of Check Point SandBlast Zero-Day Protection?
Within the Check Point Firewall Kernel resides Chain Modules, which are individually responsible for the
inspection of a specific blade or feature that has been enabled in the configuration of the gateway. For Wire
mode configuration, chain modules marked with _______ will not apply.
Fill in the blank: The R80 SmartConsole, SmartEvent GUI client, and _______ consolidate billions of logs and shows then as prioritized security events.
When simulating a problem on ClusterXL cluster with cphaprob –d STOP -s problem -t 0 register, to initiate a failover on an active cluster member, what command allows you remove the problematic state?
What is the recommended number of physical network interfaces in a Mobile Access cluster deployment?
Which of the following type of authentication on Mobile Access can NOT be used as the first authentication method?
You have pushed policy to GW-3 and now cannot pass traffic through the gateway. As a last resort, to restore traffic flow, what command would you run to remove the latest policy from GW-3?
After trust has been established between the Check Point components, what is TRUE about name and IP-address changes?
Fill in the blank: Permanent VPN tunnels can be set on all tunnels in the community, on all tunnels for specific gateways, or ______ .
The CPD daemon is a Firewall Kernel Process that does NOT do which of the following?
Which configuration file contains the structure of the Security Server showing the port numbers, corresponding protocol name, and status?
When performing a minimal effort upgrade, what will happen to the network traffic?
TESTED 16 Apr 2024
