Question 1

In SmartEvent, what are different types of automatic reactions that the administrator can configure?

Accepted Answer

Mail, Block Source, Block Event Activity, External Script, SNMP Trap are all automatic reactions that the administrator can configure in SmartEvent.

Question 2

Where do you create and modify the Mobile Access policy in R80?

Accepted Answer

In R80, the Mobile Access policy is created and modified using SmartConsole, which is the unified interface for managing Check Point security policies.

Question 3

How do Capsule Connect and Capsule Workspace differ?

Accepted Answer

Capsule Connect provides a Layer3 VPN, allowing secure network access, while Capsule Workspace offers a virtual desktop environment with applications.

Question 4

What API command below creates a new host with the name "New Host" and IP address of "192.168.0.10"?

Accepted Answer

The command "add host" is typically used to create or add a new host in many API systems.

Question 5

What is the limitation of employing Sticky Decision Function?

Accepted Answer

Acceleration technologies, such as SecureXL and CoreXL are disabled when activating SDF

Question 6

Which of the following process pulls application monitoring status?

Accepted Answer

The "cpd" process is responsible for pulling application monitoring status in Check Point systems.

Question 7

When simulating a problem on ClusterXL cluster with cphaprob -d STOP -s problem -t 0 register, to initiate a failover on an active cluster member, what command allows you remove the problematic state?

Accepted Answer

esting a failover in a controlled manner using following command; # cphaprob -d STOP -s problem -t 0 register This will register a problem state on the cluster member this was entered on; If you then run; # cphaprob list this will show an entry named STOP. to remove this problematic register run following; # cphaprob -d STOP unregister

Question 8

NAT rules are prioritized in which order? 1. Automatic Static NAT 2. Automatic Hide NAT 3. Manual/Pre-Automatic NAT 4. Post-Automatic/Manual NAT rules

Accepted Answer

NAT rules are prioritized in the order: Manual/Pre-Automatic NAT, Post-Automatic/Manual NAT rules, Automatic Static NAT, Automatic Hide NAT.

Question 9

SmartEvent has several components that function together to track security threats. What is the function of the Correlation Unit as a component of this architecture?

Accepted Answer

The Correlation Unit analyzes each log entry as it arrives at the log server according to the Event Policy. When a threat pattern is identified, it forwards an event to the SmartEvent Server.

Question 10

What is the purpose of Priority Delta in VRRP?

Accepted Answer

Each instance of VRRP running on a supported interface may monitor the link state of other interfaces. The monitored interfaces do not have to be running VRRP. If a monitored interface loses its link state, then VRRP will decrement its priority over a VRID by the specified delta value and then will send out a new VRRP HELLO packet. If the new effective priority is less than the priority a backup platform has, then the backup platform will beging to send out its own HELLO packet. Once the master sees this packet with a priority greater than its own, then it releases the VIP.

Question 11

Which command can you use to verify the number of active concurrent connections?

Accepted Answer

fw ctl pstat displays the number of active concurrent connections.

Question 12

What is the correct command to observe the Sync traffic in a VRRP environment?

Accepted Answer

The correct command to observe VRRP traffic is to filter packets with the destination address 224.0.0.18, which is the multicast address used by VRRP.

Question 13

Which statements below are CORRECT regarding Threat Prevention profiles in SmartDashboard?

Accepted Answer

You can assign multiple profiles per gateway and a profile can be assigned to one or more rules.

Question 14

SmartConsole R80 requires the following ports to be open for SmartEvent R80 management:

Accepted Answer

The answer of SmartConsole R80 requires the following ports to...

Question 15

When Dynamic Dispatcher is enabled, connections are assigned dynamically with the exception of:

Accepted Answer

The answer of When Dynamic Dispatcher is enabled, connections are...

Question 16

What is the least amount of CPU cores required to enable CoreXL?

Accepted Answer

The answer of What is the least amount of CPU...

Question 17

Which command gives us a perspective of the number of kernel tables?

Accepted Answer

The command "fw tab -s" provides a summary of the kernel tables, giving a perspective on the number of kernel tables.

Question 18

SecureXL improves non-encrypted firewall traffic throughput and encrypted VPN traffic throughput.

Accepted Answer

SecureXL improved non-encrypted firewall traffic throughput, and encrypted VPN traffic throughput, by nearly an order-of-magnitude- particularly for small packets flowing in long duration connections.

Question 19

Which statement is true regarding redundancy?

Accepted Answer

The answer of Which statement is true regarding redundancy?
...

Question 20

How many images are included with Check Point TE appliance in Recommended Mode?

Accepted Answer

The Check Point TE appliance in Recommended Mode includes 2 operating system (OS) images.

Exam 3: Check Point Certified Security Expert - R80