Question 1

By default, the R80 web API uses which content-type in its response?

Accepted Answer

The R80 web API by default uses JSON (JavaScript Object Notation) as the content-type in its response. JSON is a lightweight data interchange format that is easy for humans to read and write and easy for machines to parse and generate.

Question 2

SmartConsole R80.x requires the following ports to be open for SmartEvent:

Accepted Answer

SmartConsole R80.x requires ports 19009, 18190, and 443 to be open for SmartEvent to function properly.

Question 3

Which of the following is NOT an attribute of packet acceleration?

Accepted Answer

Connections are identified by the 5 tuple attributes: source address, destination address, source port, destination port, protocol. When the packets in a connection match all the 5 tuple attributes, the traffic flow can be processed on the accelerated path.

Question 4

What are the methods of SandBlast Threat Emulation deployment?

Accepted Answer

SandBlast Threat Emulation can be deployed in cloud, appliance, and private modes.

Question 5

When attempting to start a VPN tunnel, in the logs the error "no proposal chosen" is seen numerous times. No other VPN-related entries are present. Which phase of the VPN negotiations has failed?

Accepted Answer

IKE Phase 1 is responsible for establishing a secure channel between the two VPN endpoints. If no proposal is chosen during this phase, the VPN tunnel cannot be established.

Question 6

What does the Log "Views" tab show when SmartEvent is Correlating events?

Accepted Answer

The answer of What does the Log "Views" tab show...

Question 7

Fill in the blanks: Gaia can be configured using the ______ or _____ .

Accepted Answer

The answer of Fill in the blanks: Gaia can be...

Question 8

What is the command to check the status of Check Point processes?

Accepted Answer

The command "cpwd_admin list" is used to check the status of Check Point processes.

Question 9

You have a Geo-Protection policy blocking Australia and a number of other countries. Your network now requires a Check Point Firewall to be installed in Sydney, Australia. What must you do to get SIC to work?

Accepted Answer

The answer of You have a Geo-Protection policy blocking Australia...

Question 10

If the Active Security Management Server fails or if it becomes necessary to change the Active to Standby, the following steps must be taken to prevent data loss. Providing the Active Security Management Server is responsive, which if these steps should NOT be performed:

Accepted Answer

Renaming the hostname of the Standby member to match the Active member can cause conflicts and issues in the network, leading to potential data loss or system errors.

Question 11

The Log server sends what to the Correlation Unit?

Accepted Answer

The Log server sends logs to the Correlation Unit for analysis and correlation with other security events.

Question 12

Within the Check Point Firewall Kernel resides Chain Modules, which are individually responsible for the inspection of a specific blade or feature that has been enabled in the configuration of the gateway. For Wire mode configuration, chain modules marked with _______ will not apply.

Accepted Answer

The answer of Within the Check Point Firewall Kernel resides...

Question 13

By default how often updates are checked when the CPUSE Software Updates Policy is set to Automatic?

Accepted Answer

The answer of By default how often updates are checked...

Question 14

After the initial installation on Check Point appliance, you notice that the Management-interface and default gateway are incorrect. Which commands could you use to set the IP to 192.168.80.200/24 and default gateway to 192.168.80.1.

Accepted Answer

The correct commands to set the IP to 192.168.80.200/24 and default gateway to 192.168.80.1 are:set interface Mgmt ipv4-address 192.168.80.200 mask-length 24set static-route default nexthop gateway address 192.168.80.1 onsave config

Question 15

An administrator is creating an IPsec site-to-site VPN between his corporate office and branch office. Both offices are protected by Check Point Security Gateway managed by the same Security Management Server. While configuring the VPN community to specify the pre-shared secret the administrator found that the check box to enable pre-shared secret and cannot be enabled. Why does it not allow him to specify the pre-shared secret?

Accepted Answer

When both Security Gateways are managed by the same Security Management Server, certificate-based authentication is used instead of pre-shared secrets.

Question 16

Fill in the blank: __________ information is included in "Full Log" tracking option, but is not included in "Log" tracking option?

Accepted Answer

The answer of Fill in the blank: __________ information is...

Question 17

In R80, where do you manage your Mobile Access Policy?

Accepted Answer

In R80, the Mobile Access Policy is managed through the Access Control Policy, which centralizes the management of security policies, including mobile access.

Question 18

If SecureXL is disabled which path is used to process traffic?

Accepted Answer

When SecureXL is disabled, traffic is processed through the Firewall path, which is the traditional path for handling packets in Check Point firewalls.

Question 19

What can we infer about the recent changes made to the Rule Base?

Accepted Answer

The answer of  What can we infer about the...

Question 20

How many interfaces can you configure to use the Multi-Queue feature?

Accepted Answer

Note - Multi-Queue lets you configure a maximum of five interfaces You must reboot the gateway after changing the Multi-Queue configuration

Exam 3: Check Point Certified Security Expert - R80