CheckPoint Check Point Certified Security Administrator R81.20

QUESTION NO: 1
What is true about the IPS-Blade?

A. in R80, in the IPS Layer, the only three possible actions are Basic, Optimized and Strict B. in R80, the GeoPolicy Exceptions and the Threat Prevention Exceptions are the same C. in R80, IPS is managed by the Threat Prevention Policy D. in R80, IPS Exceptions cannot be attached to "all rules"

Correct Answer: C

QUESTION NO: 2
Sticky Decision Function (SDF) is required to prevent which of the following? Assume you set up an Active-Active cluster.

A. Symmetric routing B. Asymmetric routing C. Anti-Spoofing D. Failovers

Correct Answer: D

QUESTION NO: 3
Which statement is TRUE of anti-spoofing?

A. It is more secure to create anti-spoofing groups manually B. Anti-spoofing is not needed when IPS software blade is enabled C. It is BEST Practice to have anti-spoofing groups in sync with the routing table D. With dynamic routing enabled, anti-spoofing groups are updated automatically whenever there is a routing change

Correct Answer: C

QUESTION NO: 4
Which of the following is an authentication method used for Identity Awareness?

A. RSA B. PKI C. SSL D. Captive Portal

Correct Answer: D

QUESTION NO: 5
DLP and Geo Policy are examples of what type of Policy?

A. Standard Policies B. Shared Policies C. Unified Policies D. Inspection Policies

Correct Answer: B

QUESTION NO: 6
Which SmartConsole application shows correlated logs and aggregated data to provide an overview of potential threats and attack patterns?

A. SmartEvent B. SmartLog C. SmartView Monitor D. SmartView Tracker

Correct Answer: A

QUESTION NO: 7
Choose what BEST describes the reason why querying logs now are very fast.

A. New Smart-1 appliances double the physical memory install. B. The amount of logs being stored is less than previous versions. C. Indexing Engine indexes logs for faster search results. D. SmartConsole now queries results directly from the Security Gateway.

Correct Answer: C

QUESTION NO: 8
A stateful inspection firewall works by registering connection data and compiling this information. Where is the information stored?

A. In a CSV file on the firewall hard drive located in $FWDIR/conf/. B. In State tables. C. In the system SMEM memory pool. D. In the Sessions table.

Correct Answer: B

QUESTION NO: 9
Which type of Check Point license is tied to the IP address of a specific Security Gateway and cannot be transferred to a gateway that has a different IP address?

A. Corporate B. Formal C. Local D. Central

Correct Answer: C

QUESTION NO: 10
Which back up method uses the command line to create an image of the OS?

A. snapshot B. System backup C. Save Configuration D. Migrate

Correct Answer: A

CheckPoint Check Point Certified Security Administrator R81.20 - 156-215.81.20 Exam Questions