Question 1

Fill in the blank: A _________ VPN deployment is used to provide remote users with secure access to internal corporate resources by authenticating the user through an internet browser.

Accepted Answer

Clientless  - Users connect through a web browser and use HTTPS connections. Clientless solutions usually supply access to web-based corporate resources.

Question 2

Two administrators Dave and Jon both manage R80 Management as administrators for ABC Corp. Jon logged into the R80 Management and then shortly after Dave logged in to the same server. They are both in the Security Policies view. From the screenshots below, why does Dave not have the rule no.6 in his SmartConsole view even though Jon has it his in his SmartConsole view?

Accepted Answer

When an administrator logs in to the Security Management Server through SmartConsole, a new editing session starts. The changes that the administrator makes during the session are only available to that administrator. Other administrators see a lock icon on object and rules that are being edited. To make changes available to all administrators, and to unlock the objects and rules that are being edited, the administrator must publish the session.

Question 3

Which of the following Automatically Generated Rules NAT rules have the lowest implementation priority?

Accepted Answer

SmartDashboard organizes the automatic NAT rules in this order: Static NAT rules for Firewall, or node (computer or server) objects Hide NAT rules for Firewall, or node objects Static NAT rules for network or address range objects Hide NAT rules for network or address range objects

Question 4

In R80 spoofing is defined as a method of:

Accepted Answer

IP spoofing replaces the untrusted source IP address with a fake, trusted one, to hijack connections to your network. Attackers use IP spoofing to send malware and bots to your protected network, to execute DoS attacks, or to gain unauthorized access.

Question 5

Fill in the blank: Gaia can be configured using the _______ or ______ .

Accepted Answer

Configuring Gaia for the First Time Running the First Time Configuration Wizard in CLI After you install Gaia for the first time, use the First Time Configuration Wizard to configure the system and the Check Point products on it.

Question 6

By default, which port does the WebUI listen on?

Accepted Answer

To configure Security Management Server on Gaia: Open a browser to the WebUI:  https:// <Gaia management IP address>

Question 7

Review the following screenshot and select the BEST answer.

Accepted Answer

The answer of Review the following screenshot and select the...

Question 8

DLP and Geo Policy are examples of what type of Policy?

Accepted Answer

The Shared policies are installed with the Access Control Policy. 11ec3b16_46b8_d415_ab8d_fbcc84dbdc1e_C1171_00

Question 9

Which of the following is NOT a component of a Distinguished Name?

Accepted Answer

Distinguished Name Components CN=common name, OU=organizational unit, O=organization, L=locality, ST=state or province, C=country name

Question 10

Which VPN routing option uses VPN routing for every connection a satellite gateway handles?

Accepted Answer

On the VPN Routing page, enable the VPN routing for satellites section, by selecting one of these options: To center and to other Satellites through center ; this allows connectivity between Gateways; for example, if the spoke Gateways are DAIP Gateways, and the hub is a Gateway with a static IP address To center, or through the center to other satellites, to Internet and other VPN targets ; this allows connectivity between the Gateways, as well as the ability to inspect all communication passing through the hub to the Internet.

Question 11

Which of the following is an identity acquisition method that allows a Security Gateway to identify Active Directory users and computers?

Accepted Answer

Active Directory Query is a method used by Security Gateways to identify users and computers by querying the Active Directory.

Question 12

You are working with multiple Security Gateways enforcing an extensive number of rules. To simplify security administration, which action would you choose?

Accepted Answer

The answer of You are working with multiple Security Gateways...

Question 13

Fill in the blanks: VPN gateways authenticate using ___________ and ___________ .

Accepted Answer

VPN gateways authenticate using Digital Certificates and Pre-shared secrets.

Question 14

You have enabled "Full Log" as a tracking option to a security rule. However, you are still not seeing any data type information. What is the MOST likely reason?

Accepted Answer

The most likely reason for the logs data to stop is the low disk space on the logging device, which can  be the Management Server  or the Gateway Server.

Question 15

Which Check Point feature enables application scanning and the detection?

Accepted Answer

AppWiki Application Classification Library  enables application scanning and detection of more than 5,000 distinct applications and over 300,000 Web 2.0 widgets including instant messaging, social networking, video streaming, VoIP, games and more.

Question 16

What will be the effect of running the following command on the Security Management Server?

Accepted Answer

This command uninstall actual security policy (already installed)

Question 17

Which utility allows you to configure the DHCP service on GAIA from the command line?

Accepted Answer

Sysconfig Configuration Options 11ec3b16_46b8_fb26_ab8d_19b9f7fca609_C1171_00

Question 18

ABC Corp., and have recently returned from a training course on Check Point's new advanced R80 management platform. You are presenting an in-house R80 Management to the other administrators in ABC Corp.  How will you describe the new " Publish " button in R80 Management Console?

Accepted Answer

To make your changes available to other administrators, and to save the database before installing a policy, you must publish the session. When you publish a session, a new database version is created.

Question 19

What is the order of NAT priorities?

Accepted Answer

The order of NAT priorities is: Static NAT IP Pool NAT Hide NAT Since Static NAT has all of the advantages of IP Pool NAT and more, it has a higher priority than the other NAT methods.

Question 20

Which of the following ClusterXL modes uses a non-unicast MAC address for the cluster IP address.

Accepted Answer

Load Sharing Multicast mode uses a non-unicast MAC address for the cluster IP address to distribute traffic among multiple cluster members.

Exam 2: Check Point Certified Security Administrator (CCSA R80)