NEW QUESTION 1
What is the command to check the status of Check Point processes?

• A. top
• B. cptop
• C. cphaprob list
• D. cpwd_admin list

Answer: D

NEW QUESTION 2
Where do you create and modify the Mobile Access policy in R80?

• A. SmartConsole
• B. SmartMonitor
• C. SmartEndpoint
• D. SmartDashboard

Answer: A

NEW QUESTION 3
How many policy layers do Access Control policy support?

• A. 2
• B. 4
• C. 1
• D. 3

Answer: A

Explanation:
Two policy layers:
- Network Policy Layer
- Application Control Policy Layer

NEW QUESTION 4
You have created a rule at the top of your Rule Base to permit Guest Wireless access to the Internet. However, when guest users attempt to reach the Internet, they are not seeing the splash page to accept your Terms of Service, and cannot access the Internet. How can you fix this?

• A. Right click Accept in the rule, select “More”, and then check ‘Enable Identity Captive Portal’.
• B. On the firewall object, Legacy Authentication screen, check ‘Enable Identity Captive Portal’.
• C. In the Captive Portal screen of Global Properties, check ‘Enable Identity Captive Portal’.
• D. On the Security Management Server object, check the box ‘Identity Logging’.

Answer: A

NEW QUESTION 5
Which of the following blades is NOT subscription-based and therefore does not have to be renewed on a regular basis?

• A. Application Control
• B. Threat Emulation
• C. Anti-Virus
• D. Advanced Networking Blade

Answer: B

NEW QUESTION 6
What is true of the API server on R80.10?

• A. By default the API-server is activated and does not have hardware requirements.
• B. By default the API-server is not active and should be activated from the WebUI.
• C. By default the API server is active on management and stand-alone servers with 16GB of RAM (or more).
• D. By default, the API server is active on management servers with 4 GB of RAM (or more) and on stand-alone servers with 8GB of RAM (or more).

Answer: D

NEW QUESTION 7
How would you deploy TE250X Check Point appliance just for email traffic and in-line mode without a Check Point Security Gateway?

• A. Install appliance TE250X on SpanPort on LAN switch in MTA mode.
• B. Install appliance TE250X in standalone mode and setup MTA.
• C. You can utilize only Check Point Cloud Services for this scenario.
• D. It is not possible, always Check Point SGW is needed to forward emails to SandBlast appliance.

Answer: C

NEW QUESTION 8
What scenario indicates that SecureXL is enabled?

• A. Dynamic objects are available in the Object Explorer
• B. SecureXL can be disabled in cpconfig
• C. fwaccel commands can be used in clish
• D. Only one packet in a stream is seen in a fw monitor packet capture

Answer: C

NEW QUESTION 9
Customer’s R80 management server needs to be upgraded to R80.10. What is the best upgrade method when the management server is not connected to the Internet?

• A. Export R80 configuration, clean install R80.10 and import the configuration
• B. CPUSE offline upgrade
• C. CPUSE online upgrade
• D. SmartUpdate upgrade

Answer: C

NEW QUESTION 10
Traffic from source 192.168.1.1 is going to www.google.com. The Application Control Blade on the gateway is inspecting the traffic. Assuming acceleration is enabled which path is handling the traffic?

• A. Slow Path
• B. Medium Path
• C. Fast Path
• D. Accelerated Path

Answer: A

NEW QUESTION 11
The SmartEvent R80 Web application for real-time event monitoring is called:

• A. SmartView Monitor
• B. SmartEventWeb
• C. There is no Web application for SmartEvent
• D. SmartView

Answer: B

NEW QUESTION 12
Which command shows the current connections distributed by CoreXL FW instances?

• A. fw ctl multik stat
• B. fw ctl affinity -l
• C. fw ctl instances -v
• D. fw ctl iflist

Answer: A

NEW QUESTION 13
Which statement is NOT TRUE about Delta synchronization?

• A. Using UDP Multicast or Broadcast on port 8161
• B. Using UDP Multicast or Broadcast on port 8116
• C. Quicker than Full sync
• D. Transfers changes in the Kernel tables between cluster members.

Answer: A

NEW QUESTION 14
The Firewall kernel is replicated multiple times, therefore:

• A. The Firewall kernel only touches the packet if the connection is accelerated
• B. The Firewall can run different policies per core
• C. The Firewall kernel is replicated only with new connections and deletes itself once the connection times out
• D. The Firewall can run the same policy on all cores.

Answer: D

Explanation:
On a Security Gateway with CoreXL enabled, the Firewall kernel is replicated multiple times. Each replicated copy, or instance, runs on one processing core. These instances handle traffic concurrently, and each instance is a complete and independent inspection kernel. When CoreXL is enabled, all the kernel instances in the Security Gateway process traffic through the same interfaces and apply the same security policy.

NEW QUESTION 15
What must you do first if “fwm sic_reset” could not be completed?

• A. Cpstop then find keyword “certificate” in objects_5_0.C and delete the section
• B. Reinitialize SIC on the security gateway then run “fw unloadlocal”
• C. Reset SIC from Smart Dashboard
• D. Change internal CA via cpconfig

Answer: D

NEW QUESTION 16
How many layers make up the TCP/IP model?

• A. 2
• B. 7
• C. 6
• D. 4

Answer: D

NEW QUESTION 17
To accelerate the rate of connection establishment, SecureXL groups all connection that match a particular service and whose sole differentiating element is the source port. The type of grouping enables even the very first packets of a TCP handshake to be accelerated. The first packets of the first connection on the same service will be forwarded to the Firewall kernel which will then create a template of the connection. Which of the these is NOT a SecureXL template?

• A. Accept Template
• B. Deny Template
• C. Drop Template
• D. NAT Template

Answer: B

NEW QUESTION 18
......