CheckPoint Check Point Certified Security Expert - R81.20

QUESTION NO: 1
In R81, where do you manage your Mobile Access Policy?

A. Through the Mobile Console B. Access Control Policy C. Shared Gateways Policy D. From the Dedicated Mobility Tab

Correct Answer: A

QUESTION NO: 2
Which one of the following is NOT a configurable Compliance Regulation?

A. CJIS B. GLBA C. NCIPA D. SOCI

Correct Answer: D

QUESTION NO: 3
What is not a purpose of the deployment of Check Point API?

A. Create products that use and enhance the Check Point solution B. Execute an automated script to perform common tasks C. Integrate Check Point products with 3rd party solution D. Create a customized GUI Client for manipulating the objects database

Correct Answer: D

QUESTION NO: 4
Check Point Management (cpm) is the main management process in that it provides the architecture for a consolidated management console. It empowers the migration from legacy Client-side logic to Server-side logic.
The cpm process:

A. Performs database tasks such as creating, deleting, and modifying objects and compiling policy. B. Performs database tasks such as creating, deleting, and modifying objects and compiling as well as policy code generation. C. Allow GUI Client and management server to communicate via TCP Port 18191 D. Allow GUI Client and management server to communicate via TCP Port 19001

Correct Answer: A

QUESTION NO: 5
In the Firewall chain mode FFF refers to:

A. Stateless Packets B. Stateful Packets C. All Packets D. No Match

Correct Answer: C

QUESTION NO: 6
The Correlation Unit performs all but the following actions:

A. Assigns a severity level to the event. B. Generates an event based on the Event policy. C. Marks logs that individually are not events, but may be part of a larger pattern to be identified later. D. Takes a new log entry that is part of a group of items that together make up an event, and adds it to an ongoing event.

Correct Answer: A

QUESTION NO: 7
Due to high CPU workload on the Security Gateway, the security administrator decided to purchase a new multicore CPU to replace the existing single core CPU.
After installation, is the administrator required to perform any additional tasks?

A. After upgrading the hardware, increase the number of kernel instances using cpconfig B. Run cprestart from dish C. Administrator does not need to perform any task. Check Point will make use of the newly installed CPU and Cores. D. Hyperthreading must be enabled in the bios to use CoreXL

Correct Answer: A

QUESTION NO: 8
VPN Link Selection will perform the following when the primary VPN link goes down?

A. The Firewall will send out the packet on all interfaces. B. The Firewall will drop the packets. C. The Firewall can update the Link Selection entries to start using a different link for the same tunnel. D. The Firewall will inform the client that the tunnel is down.

Correct Answer: C

QUESTION NO: 9
Which of the following technologies extracts detailed information from packets and stores that information in state tables?

A. Application Layer Firewall B. Packet Filtering C. INSPECT Engine D. Stateful Inspection

Correct Answer: C

QUESTION NO: 10
A user complains that some Internet resources are not available. The Administrator is having issues seeing it packets are being dropped at the firewall (not seeing drops in logs).
What is the solution to troubleshoot the issue?

A. run fw unloadlocal" on the relevant gateway and check the ping again B. run ''fw log" on the relevant gateway C. run ''fw ctl zdebug drop" on the relevant gateway D. run "cpstop" on the relevant gateway and check the ping again

Correct Answer: C

QUESTION NO: 11
When SecureXL is enabled, all packets should be accelerated, except packets that match the following conditions:

A. CIFS packets B. All UDP packets C. All IPv6 Traffic D. All packets that match a rule whose source or destination is the Outside Corporate Network

Correct Answer: A

QUESTION NO: 12
How can you switch the active log file?

A. Run fwm logswitch on the Management Server B. Run fw logswitch on the gateway C. Run fwm logswitch on the gateway D. Run fw logswitch on the Management Server

Correct Answer: D

QUESTION NO: 13
Which process handles connection from SmartConsole R81?

A. cpm B. fwm C. cpd D. cpmd

Correct Answer: A

QUESTION NO: 14
How can SmartView application accessed?

A. http://<Security Management IP Address>:4434/smartview/ B. https://<Security Management IP Address>/smartview/ C. https://<Security Management host name>:4434/smartview/ D. http://<Security Management IP Address>/smartview

Correct Answer: B

QUESTION NO: 15
Which directory below contains log files?

A. /opt/CPsuite-R81/fw1/log B. /opt/CPshrd-R81/log C. /opt/CPSmartlog-R81/log D. /opt/CPsuite-R81/log

Correct Answer: A

CheckPoint Check Point Certified Security Expert - R81.20 - 156-315.81.20 Exam Questions