Question 1

Which R77 GUI would you use to see number of packets accepted since the last policy install?

Accepted Answer

SmartView Monitor is used to view real-time and historical data about traffic and system performance, including the number of packets accepted since the last policy install.

Question 2

Joey wants to configure NTP on R80 Security Management Server. He decided to do this via WebUI. What is the correct IP address and default port to access the Web UI for Gaia platform via browser?

Accepted Answer

Access to Web UI Gaia administration interface, initiate a connection from a browser to the default administration IP address:  Logging in to the WebUI Logging in To log in to the WebUI: 1. Enter this URL in your browser: https://<Gaia IP address> 2. Enter your user name and password.

Question 3

The ________ feature allows administrators to share a policy with other policy packages.

Accepted Answer

Shared policies allow administrators to share a policy with other policy packages.

Question 4

The IPS policy for pre-R80 gateways is installed during the _______ .

Accepted Answer

https://sc1.checkpoint.com/documents/R80/CP_R80BC_ThreatPrevention/html_frameset.htm?topic=documents/R80/CP_R80BC_ThreatPrevention/136486

Question 5

Bob and Joe both have Administrator Roles on their Gaia Platform. Bob logs in on the WebUI and then Joe logs in through CLI. Choose what BEST describes the following scenario, where Bob and Joe are both logged in:

Accepted Answer

The answer of Bob and Joe both have Administrator Roles...

Question 6

Mesh and Star are two types of VPN topologies. Which statement below is TRUE about these types of communities?

Accepted Answer

In a mesh community, all members can create a tunnel with any other member.

Question 7

The __________ is used to obtain identification and security information about network users.

Accepted Answer

The User Directory is a system or service that stores and manages user information, including identification and security details, for network users.

Question 8

Which default Gaia user has full read/write access?

Accepted Answer

The "Administrator" is the default Gaia user with full read/write access, allowing complete control over the system settings and configurations.

Question 9

The _________ software blade enables Application Security policies to allow, block, or limit website access based on user, group, and machine identities.

Accepted Answer

The answer of The _________ software blade enables Application Security...

Question 10

Each cluster has __________ interfaces.

Accepted Answer

Each cluster member has three interfaces: one external interface, one internal interface, and one for synchronization. Cluster member interfaces facing in each direction are connected via a switch, router, or VLAN switch.

Question 11

According to Check Point Best Practice, when adding a 3 rd party gateway to a Check Point security solution what object SHOULD be added? A(n):

Accepted Answer

An Interoperable Device object is used to represent third-party gateways in Check Point security solutions, allowing for integration and management within the Check Point environment.

Question 12

RADIUS Accounting gets ______ data from requests generated by the accounting client

Accepted Answer

How RADIUS Accounting Works with Identity Awareness RADIUS Accounting gets identity data from  RADIUS Accounting Requests  generated by the RADIUS accounting client.

Question 13

Gaia can be configured using the _______ or ______ .

Accepted Answer

Configuring Gaia for the First Time Running the First Time Configuration Wizard in CLI After you install Gaia for the first time, use the First Time Configuration Wizard to configure the system and the Check Point products on it.

Question 14

Where can you trigger a failover of the cluster members? 1. Log in to Security Gateway CLI and run command clusterXL_admin down . 2. In SmartView Monitor right-click the Security Gateway member and select Cluster member stop 3. Log into Security Gateway CLI and run command cphaprob down

Accepted Answer

How to Initiate Failover 11ec3b16_46de_d2e8_ab8d_1923f39ce883_C1171_00

Question 15

Which policy type has its own Exceptions section?

Accepted Answer

The  Exceptions Groups  pane lets you define exception groups. When necessary, you can create exception groups to use in the Rule Base. An exception group contains one or more defined exceptions. This option facilitates ease-of-use so you do not have to manually define exceptions in multiple rules for commonly required exceptions. You can choose to which rules you want to add exception groups. This means they can be added to some rules and not to others, depending on necessity.

Question 16

You are the senior Firewall administrator for ABC Corp., and have recently returned from a training course on Check Point's new advanced R80 management platform. You are presenting an in-house overview of the new features of Check Point R80 Management to the other administrators in ABC Corp.  How will you describe the new " Publish " button in R80 Management Console?

Accepted Answer

To make your changes available to other administrators, and to save the database before installing a policy, you must publish the session. When you publish a session, a new database version is created.

Question 17

What are the two high availability modes?

Accepted Answer

ClusterXL has four working modes. This section briefly describes each mode and its relative advantages and disadvantages. Load Sharing Multicast Mode Load Sharing Unicast Mode New High Availability Mode High Availability Legacy Mode

Question 18

Ken wants to obtain a configuration lock from other administrator on R80 Security Management Server Operating System. He can do this via WebUI or via CLI. Which command should he use in CLI?

Accepted Answer

Use the  database  feature to obtain the configuration lock. The database feature has two commands: lock database [override] . The commands do the same thing: obtain the configuration lock from another administrator. 11ec3b16_46df_210a_ab8d_9fa8b560d7ff_C1171_00

Question 19

What is the appropriate default Gaia Portal address?

Accepted Answer

The default Gaia Portal address uses HTTPS protocol with the IP address of the device, without specifying a port number, which defaults to 443.

Question 20

You installed Security Management Server on a computer using GAiA in the MegaCorp home office. You use IP address 10.1.1.1. You also installed the Security Gateway on a second GAiA computer, which you plan to ship to another Administrator at a MegaCorp hub office. What is the correct order for pushing SIC certificates to the Gateway before shipping it? 1. Run cpconfig on the Gateway, select Secure Internal Communication , enter the activation key, and reconfirm. 2. Initialize Internal Certificate Authority (ICA) on the Security Management Server. 3. Configure the Gateway object with the host name and IP addresses for the remote site. 4. Click the Communication button in the Gateway object's General screen, enter the activation key, and click Initialize and OK . 5. Install the Security Policy.

Accepted Answer

First, initialize the Internal Certificate Authority (ICA) on the Security Management Server. Then, run cpconfig on the Gateway to set up Secure Internal Communication (SIC). Next, configure the Gateway object with the necessary details. After that, establish communication by entering the activation key. Finally, install the Security Policy.

Exam 2: Check Point Certified Security Administrator (CCSA R80)