NEW QUESTION 1
What are types of Check Point APIs available currently as part of R80.10 code?

• A. Security Gateway API Management API, Threat Prevention API and Identity Awareness Web Services API
• B. Management API, Threat Prevention API, Identity Awareness Web Services API and OPSEC SDK API
• C. OSE API, OPSEC SDK API, Threat Extraction API and Policy Editor API
• D. CPMI API, Management API, Threat Prevention API and Identity Awareness Web Services API

Answer: B

NEW QUESTION 2
Which is the least ideal Synchronization Status for Security Management Server High Availability deployment?

• A. Synchronized
• B. Never been synchronized
• C. Lagging
• D. Collision

Answer: D

NEW QUESTION 3
The essential means by which state synchronization works to provide failover in the event an active member goes down, _______ is used specifically for clustered environments to allow gateways to report their own state and learn about the states of other members in the cluster.

• A. ccp
• B. cphaconf
• C. cphad
• D. cphastart

Answer: A

NEW QUESTION 4
Session unique identifiers are passed to the web api using which http header option?

• A. X-chkp-sid
• B. Accept-Charset
• C. Proxy-Authorization
• D. Application

Answer: C

NEW QUESTION 5
Tom has been tasked to install Check Point R80 in a distributed deployment. Before Tom installs the systems this way, how many machines will he need if he does NOT include a SmartConsole machine in his calculations?

• A. One machine, but it needs to be installed using SecurePlatform for compatibility purposes.
• B. One machine
• C. Two machines
• D. Three machines

Answer: C

Explanation:
One for Security Management Server and the other one for the Security Gateway.

NEW QUESTION 6
How many users can have read/write access in Gaia at one time?

• A. Infinite
• B. One
• C. Three
• D. Two

Answer: B

NEW QUESTION 7
Which path below is available only when CoreXL is enabled?

• A. Slow path
• B. Firewall path
• C. Medium path
• D. Accelerated path

Answer: C

NEW QUESTION 8
Which of the following commands shows the status of processes?

• A. cpwd_admin -l
• B. cpwd -l
• C. cpwd admin_list
• D. cpwd_admin list

Answer: D

NEW QUESTION 9
Which of the following is NOT an option to calculate the traffic direction?

• A. Incoming
• B. Internal
• C. External
• D. Outgoing

Answer: D

NEW QUESTION 10
SmartEvent has several components that function together to track security threats. What is the function of the Correlation Unit as a component of this architecture?

• A. Analyzes each log entry as it arrives at the log server according to the Event Polic
• B. When a threat pattern is identified, an event is forwarded to the SmartEvent Server.
• C. Correlates all the identified threats with the consolidation policy.
• D. Collects syslog data from third party devices and saves them to the database.
• E. Connects with the SmartEvent Client when generating threat reports.

Answer: A

NEW QUESTION 11
Which VPN routing option uses VPN routing for every connection a satellite gateway handles?

• A. To satellites through center only
• B. To center only
• C. To center and to other satellites through center
• D. To center, or through the center to other satellites, to Internet and other VPN targets

Answer: D

NEW QUESTION 12
Selecting an event displays its configurable properties in the Detail pane and a description of the event in the Description pane. Which is NOT an option to adjust or configure?

• A. Severity
• B. Automatic reactions
• C. Policy
• D. Threshold

Answer: C

NEW QUESTION 13
Joey wants to upgrade from R75.40 to R80 version of Security management. He will use Advanced Upgrade with Database Migration method to achieve this.
What is one of the requirements for his success?

• A. Size of the /var/log folder of the source machine must be at least 25% of the size of the /var/log directory on the target machine
• B. Size of the /var/log folder of the target machine must be at least 25% of the size of the /var/log directory on the source machine
• C. Size of the $FWDIR/log folder of the target machine must be at least 30% of the size of the$FWDIR/log directory on the source machine
• D. Size of the /var/log folder of the target machine must be at least 25GB or more

Answer: B

NEW QUESTION 14
For Management High Availability, which of the following is NOT a valid synchronization status?

• A. Collision
• B. Down
• C. Lagging
• D. Never been synchronized

Answer: B

NEW QUESTION 15
You noticed that CPU cores on the Security Gateway are usually 100% utilized and many packets were
dropped. You don’t have a budget to perform a hardware upgrade at this time. To optimize drops you decide to use Priority Queues and fully enable Dynamic Dispatcher. How can you enable them?

• A. fw ctl multik dynamic_dispatching on
• B. fw ctl multik dynamic_dispatching set_mode 9
• C. fw ctl multik set_mode 9
• D. fw ctl multik pq enable

Answer: C

NEW QUESTION 16
SmartEvent provides a convenient way to run common command line executables that can assist in investigating events. Right-clicking the IP address, source or destination, in an event provides a list of default and customized commands. They appear only on cells that refer to IP addresses because the IP address of the active cell is used as the destination of the command when run. The default commands are:

• A. ping, traceroute, netstat, and route
• B. ping, nslookup, Telnet, and route
• C. ping, whois, nslookup, and Telnet
• D. ping, traceroute, netstat, and nslookup

Answer: C

NEW QUESTION 17
Fill in the blank: A _______ VPN deployment is used to provide remote users with secure access to internal corporate resources by authenticating the user through an internet browser.

• A. Clientless remote access
• B. Clientless direct access
• C. Client-based remote access
• D. Direct access

Answer: A

NEW QUESTION 18
......