Question 1

To fully enable Dynamic Dispatcher with Firewall Priority Queues on a Security Gateway, run the following command in Expert mode then reboot:

Accepted Answer

The command "fw ctl multik set_mode 9" is used to enable Dynamic Dispatcher with Firewall Priority Queues on a Security Gateway.

Question 2

What is the correct command to observe the Sync traffic in a VRRP environment?

Accepted Answer

The correct command to observe VRRP traffic is to filter for the multicast address 224.0.0.18, which is used by VRRP for communication between routers.

Question 3

There are 4 ways to use the Management API for creating host object with R80 Management API. Which one is NOT correct?

Accepted Answer

The cpconfig tool is not used for creating host objects with the R80 Management API. It is typically used for configuring Check Point software settings, not for API operations.

Question 4

You noticed that CPU cores on the Security Gateway are usually 100% utilized and many packets were dropped. You don't have a budget to perform a hardware upgrade at this time. To optimize drops you decide to use Priority Queues and fully enable Dynamic Dispatcher. How can you enable them?

Accepted Answer

Dynamic Dispatcher can be enabled using the command "fw ctl multik set_mode 9".

Question 5

SandBlast offers busineses flexibility in implementation based on their individual business needs. What is an option for deployment of Check Point SandBlast Zero-Day Protection?

Accepted Answer

Check Point SandBlast Zero-Day Protection can be deployed as a Smart Cloud Service, which provides flexibility for businesses to implement it according to their specific needs.

Question 6

John detected high load on sync interface. Which is most recommended solution?

Accepted Answer

The answer of John detected high load on sync interface....

Question 7

Connections to the Check Point R80 Web API use what protocol?

Accepted Answer

The Check Point R80 Web API uses HTTPS for secure communication.

Question 8

What is true about VRRP implementations?

Accepted Answer

The answer of What is true about VRRP implementations?
...

Question 9

Advanced Security Checkups can be easily conducted within:

Accepted Answer

Advanced Security Checkups can be easily conducted within Reports.

Question 10

How can SmartView application accessed?

Accepted Answer

SmartView is accessed via a secure HTTPS connection using the Security Management IP Address followed by /smartview/.

Question 11

Steve is a Cyber Security Engineer working for Global Bank with a large scale deployment of Check Point Enterprise Appliances. Steve's manager, Diana, asks him to provide firewall connection table details from one of the firewalls for which he is responsible. Which of these commands may impact performance briefly and should not be used during heavy traffic times of day?

Accepted Answer

The answer of Steve is a Cyber Security Engineer working...

Question 12

The Event List within the Event tab contains:

Accepted Answer

The Event List within the Event tab contains events generated by a query, showing the specific occurrences that match the query criteria.

Question 13

Which of the following type of authentication on Mobile Access can NOT be used as the first authentication method?

Accepted Answer

Dynamic ID is typically used as a secondary authentication method, not as the first method.

Question 14

In CoreXL, the Firewall kernel is replicated multiple times, therefore:

Accepted Answer

On a Security Gateway with CoreXL enabled, the Firewall kernel is replicated multiple times. Each replicated copy, or instance, runs on one processing core. These instances handle traffic concurrently, and each instance is a complete and independent inspection kernel. When CoreXL is enabled, all the kernel instances in the Security Gateway process traffic through the same interfaces and apply the same security policy.

Question 15

Which command is used to set the CCP protocol to Multicast?

Accepted Answer

The command "cphaconf set_ccp multicast" is used to set the Cluster Control Protocol (CCP) to use multicast in Check Point environments.

Question 16

When configuring SmartEvent Initial settings, you must specify a basic topology to SmartEvent to help it calculate traffic direction for events. What is this setting called, and what are you defining?

Accepted Answer

In SmartEvent Initial settings, you define the "Internal network(s)" to help SmartEvent understand the network topology and calculate traffic direction for events.

Question 17

Selecting an event displays its configurable properties in the Detail pane and a description of the event in the Description pane. Which is NOT an option to adjust or configure?

Accepted Answer

Policy is not typically an adjustable or configurable property for an event in the context described.

Question 18

Installations and upgrades with CPUSE require that the CPUSE agent is up-to-date. Usually the latest build is downloaded automatically. How can you verify the CPUSE agent build?

Accepted Answer

The CPUSE agent build can be verified in the WebUI Status and Actions page or by using the CLISH command "show installer status build".

Question 19

Your manager asked you to check the status of SecureXL, and its enabled templates and features. What command will you use to provide such information to manager?

Accepted Answer

The correct command to check the status of SecureXL and its enabled templates and features is "fwaccel stat".

Question 20

How would you enable VMAC Mode in ClusterXL?

Accepted Answer

To enable VMAC Mode in ClusterXL, you need to navigate to the Cluster Object settings, then edit the ClusterXL and VRRP settings to use Virtual MAC.

Exam 3: Check Point Certified Security Expert - R80