NEW QUESTION 1
Ken wants to obtain a configuration lock from other administrator on R80 Security Management Server. He can do this via WebUI or a via CLI. Which command should be use in CLI? Choose the correct answer.

• A. remove database lock
• B. The database feature has one command lock database override.
• C. override database lock
• D. The database feature has two commands: lock database override and unlock databas
• E. Both will work.

Answer: D

Explanation: Use the database feature to obtain the configuration lock. The database feature has two commands:
lock database [override].
unlock database
The commands do the same thing: obtain the configuration lock from another administrator.

NEW QUESTION 2
Fill in the blanks. There are _____ types of software containers ______

• A. Three; security managemen
• B. Security Gateway and endpoint security.
• C. Three; Security Gateway, endpoint Security, and gateway management.
• D. Two; security management and endpoint security
• E. Two; endpoint security and Security Gateway

Answer: A

NEW QUESTION 3
What Check Point technologies deny or permit network traffic?

• A. Application Control DLP
• B. Packet Filtering, Stateful Inspection, Application Layer Firewall
• C. ACL SandBlast, MPT
• D. IPS, Mobile Threat Protection

Answer: B

NEW QUESTION 4
Why would an administrator see the message below?

• A. A new Policy Package created on both the Management and Gateway will be deleted and must be packed up first before proceeding.
• B. A new Policy Package created on the Management is going to be installed to the existing Gateway.
• C. A new Policy Package created on the Gateway is going to be installed on the existing Management.
• D. A new Policy Package created on the Gateway and transferred to the management will be overwritten bythe Policy Package currently on the Gateway but can be restored from a periodic backup on the Gateway.

Answer: B

NEW QUESTION 5
Which of the following are available SmartConsole clients which can be installed from the R77 Windows CD? Read all answers and select the most complete and valid list.

• A. SmartView Tracker, SmartDashboard, CPINFO, SmartUpdate, SmartView Status
• B. SmartView Tracker, SmartDashboard, SmartLSM, SmartView Monitor
• C. SmartView Tracker, CPINFO, SmartUpdate
• D. Security Policy Editor, Log Viewer, Real Time Monitor GUI

Answer: C

NEW QUESTION 6
What is the difference between an event and a log?

• A. Events are generated at gateway according to Event Policy
• B. A log entry becomes an event when it matches any rule defined in Event Policy
• C. Events are collected with SmartWorkflow from Trouble Ticket systems
• D. Logs and Events are synonyms

Answer: B

NEW QUESTION 7
Two administrators Dave and Jon both manage R80 Management as administrators for ABC Corp. Jon logged into the R80 Management and then shortly after Dave logged in to the same server. They are both in the Security Policies view. From the screenshots below, why does Dave not have the rule no.6 in his SmartConsole view even though Jon has it his in his SmartConsole view?

• A. Jon is currently editing rule no.6 but has Published part of his changes.
• B. Dave is currently editing rule no.6 and has marked this rule for deletion.
• C. Dave is currently editing rule no.6 and has deleted it from his Rule Base.
• D. Jon is currently editing rule no.6 but has not yet Published his changes.

Answer: D

Explanation: When an administrator logs in to the Security Management Server through SmartConsole, a new editing session starts. The changes that the administrator makes during the session are only available to that administrator. Other administrators see a lock icon on object and rules that are being edited. To make changes available to all administrators, and to unlock the objects and rules that are being edited, the administrator must publish the session.

NEW QUESTION 8
Where can you trigger a failover of the cluster members?
Log in to Security Gateway CLI and run command clusterXL_admin down.
In SmartView Monitor right-click the Security Gateway member and select Cluster member stop. Log into Security Gateway CLI and run command cphaprob down.

• A. 1, 2, and 3
• B. 2 and 3
• C. 1 and 2
• D. 1 and 3

Answer: C

Explanation: How to Initiate Failover

NEW QUESTION 9
Using ClusterXL, what statement is true about the Sticky Decision Function?

• A. Can only be changed for Load Sharing implementations
• B. All connections are processed and synchronized by the pivot
• C. Is configured using cpconfig
• D. Is only relevant when using SecureXL

Answer: A

NEW QUESTION 10
What is the BEST command to view configuration details of all interfaces in Gaia CLISH?

• A. ifconfig -a
• B. show interfaces
• C. show interfaces detail
• D. show configuration interface

Answer: D

NEW QUESTION 11
You are using SmartView Tracker to troubleshoot NAT entries. Which column do you check to view the NAT'd source port if you are using Source NAT?

• A. XlateDst
• B. XlateSPort
• C. XlateDPort
• D. XlateSrc

Answer: B

NEW QUESTION 12
R80 Security Management Server can be installed on which of the following operating systems?

• A. Gaia only
• B. Gaia, SPLAT, Windows Server only
• C. Gaia, SPLAT, Windows Server and IPSO only
• D. Gaia and SPLAT only

Answer: A

Explanation: R80 can be installed only on GAIA OS.
Supported Check Point Installations All R80 servers are supported on the Gaia Operating System:
• Security Management Server
• Multi-Domain Security Management Server
• Log Server
• Multi-Domain Log Server
• SmartEvent Server

NEW QUESTION 13
What happens if the identity of a user is known?

• A. If the user credentials do not match an Access Role, the traffic is automatically dropped.
• B. If the user credentials do not match an Access Role, the system displays a sandbox.
• C. If the user credentials do not match an Access Role, the gateway moves onto the next rule.
• D. If the user credentials do not match an Access Role, the system displays the Captive Portal.

Answer: C

NEW QUESTION 14
What Identity Agent allows packet tagging and computer authentication?

• A. Endpoint Security Client
• B. Full Agent
• C. Light Agent
• D. System Agent

Answer: B

NEW QUESTION 15
The Gaia operating system supports which routing protocols?

• A. BGP, OSPF, RIP
• B. BGP, OSPF, EIGRP, PIM, IGMP
• C. BGP, OSPF, RIP, PIM, IGMP
• D. BGP, OSPF, RIP, EIGRP

Answer: A

Explanation: The Advanced Routing Suite
The Advanced Routing Suite CLI is available as part of the Advanced Networking Software Blade.
For organizations looking to implement scalable, fault-tolerant, secure networks, the Advanced Networking blade enables them to run industry-standard dynamic routing protocols including BGP, OSPF, RIPv1, and RIPv2 on security gateways. OSPF, RIPv1, and RIPv2 enable dynamic routing over a single autonomous system—like a single department, company, or service provider—to avoid network failures. BGP provides dynamic routing support across more complex networks involving multiple autonomous systems—such as when a company uses two service providers or divides a network into multiple areas with different administrators responsible for the performance of each.

NEW QUESTION 16
When an encrypted packet is decrypted, where does this happen?

• A. Security policy
• B. Inbound chain
• C. Outbound chain
• D. Decryption is not supported

Answer: A

NEW QUESTION 17
With which command can you view the running configuration of Gaia-based system.

• A. show conf-active
• B. show configuration active
• C. show configuration
• D. show running-configuration

Answer: C

NEW QUESTION 18
How do you configure the Security Policy to provide uses access to the Captive Portal through an external (Internet) interface?

• A. Change the gateway settings to allow Captive Portal access via an external interface.
• B. No action is necessar
• C. This access is available by default.
• D. Change the Identity Awareness settings under Global Properties to allow Captive Policy access on all interfaces.
• E. Change the Identity Awareness settings under Global Properties to allow Captive Policy access for an external interface.

Answer: A