Question 1

When Identity Awareness is enabled, which identity source(s) is(are) used for Application Control?

Accepted Answer

Identity Awareness gets identities from these acquisition sources: AD Query Browser-Based Authentication Endpoint Identity Agent Terminal Servers Identity Agent Remote Access

Question 2

What is the purpose of a Stealth Rule?

Accepted Answer

A Stealth Rule is used to protect the firewall itself by dropping any traffic that is destined for the firewall unless it is explicitly allowed by other rules.

Question 3

An identity server uses a ___________ for user authentication.

Accepted Answer

An identity server uses a shared secret for user authentication. A shared secret is a piece of information that is known only to the identity server and the user. When the user attempts to authenticate, they must provide the shared secret to the identity server. If the shared secret is correct, the user is authenticated.

Question 4

The destination server for Security Gateway logs depends on a Security Management Server configuration.

Accepted Answer

The answer of The destination server for Security Gateway logs...

Question 5

An Endpoint identity agent uses a ___________ for user authentication.

Accepted Answer

Endpoint identity agents typically use username/password or Kerberos tickets for user authentication, as these methods are common for verifying user identities.

Question 6

There are ________ types of software containers ________.

Accepted Answer

There are three  types of Software Containers : Security Management, Security Gateway, and Endpoint Security.

Question 7

You want to store the GAiA configuration in a file for later reference. What command should you use?

Accepted Answer

The correct command to store the GAiA configuration in a file for later reference is "save configuration <filename>".

Question 8

You have discovered suspicious activity in your network. What is the BEST immediate action to take?

Accepted Answer

Creating a Suspicious Activity Monitoring (SAM) rule allows you to immediately block the suspicious traffic while further investigation is conducted, providing a quick response to potential threats.

Question 9

The system administrator of a company is trying to find out why acceleration is not working for the traffic. The traffic is allowed according to the rule base and checked for viruses. But it is not accelerated. What is the most likely reason that the traffic is not accelerated?

Accepted Answer

The answer of The system administrator of a company is...

Question 10

To create policy for traffic to or from a specific geographical location, use the _____________.

Accepted Answer

Shared Policies The   section in the  Security Policies  shows the policies that are not in a Policy package. They are shared between all Policy packages. Shared policies are installed with the Access Control Policy.

Question 11

Which of the following are types of VPN communities?

Accepted Answer

VPN communities typically include meshed, star, and combination types, which define how the VPN connections are structured and managed.

Question 12

When tunnel test packets no longer invoke a response, SmartView Monitor displays _____________ for the given VPN tunnel.

Accepted Answer

SmartView Monitor displays "Down" for the given VPN tunnel when tunnel test packets no longer invoke a response, indicating that the tunnel is not operational.

Question 13

John is the administrator of a R80 Security Management server managing an R77.30 Check Point Security Gateway. John is currently updating the network objects and amending the rules using SmartConsole. To make John's changes available to other administrators, and to save the database before installing a policy, what must John do?

Accepted Answer

Installing and Publishing It is important to understand the differences between publishing and installing.

Question 14

Default port numbers for an LDAP server is ______ for standard connections and _______ SSL connections.

Accepted Answer

A client starts an LDAP session by connecting to an LDAP server, called a Directory System Agent (DSA), by default on TCP and UDP port 389, or on port 636 for LDAPS. Global Catalog is available by default on ports 3268, and 3269 for LDAPS.

Question 15

In Security Gateways, SIC uses ______________ for encryption.

Accepted Answer

AES-128 is used for encryption in Security Gateways.

Question 16

Choose what BEST describes the reason why querying logs now is very fast.

Accepted Answer

The Indexing Engine is designed to index logs, which significantly speeds up the process of querying and retrieving search results.

Question 17

Which information is included in the "Extended Log" tracking option, but is not included in the "Log" tracking option?

Accepted Answer

The "Extended Log" tracking option includes additional details such as application information, which is not part of the standard "Log" tracking option.

Question 18

What licensing feature automatically verifies current licenses and activates new licenses added to the License and Contracts repository?

Accepted Answer

The "Automatic licensing and Verification tool" is designed to automatically verify current licenses and activate new licenses added to the License and Contracts repository.

Question 19

In R80, more than one administrator can login to the Security Management Server with SmartConsole with write permission at the same time.

Accepted Answer

More than one administrator can connect to the Security Management Server at the same time. Every administrator has their own username, and works in a session that is independent of the other administrators.

Question 20

A ____ license requires an administrator to designate a gateway for attachment whereas a _____ license is automatically attached to a Security Gateway.

Accepted Answer

The answer of A ____ license requires an administrator to...

Exam 2: Check Point Certified Security Administrator (CCSA R80)