CheckPoint Check Point Certified Security Expert Update - R80

QUESTION NO: 1
To qualify as an Identity Awareness enabled rule, which column MAY include an Access Role?

A. Track B. Source C. Action D. User

Correct Answer: B

QUESTION NO: 2
To qualify as an Identity Awareness enabled rule, which column MAY include an Access Role?

A. Track B. Source C. Action D. User

Correct Answer: B

QUESTION NO: 3
Which of the following is NOT an internal/native Check Point command?

A. fwaccel on B. cphaprob C. tcpdump D. fw ct1 debug

Correct Answer: C

QUESTION NO: 4
What happens if the identity of a user is known?

A. If the user credentials do not match an Access Role, the gateway moves onto the next rule. B. If the user credentials do not match an Access Role, the traffic is automatically dropped. C. If the user credentials do not match an Access Role, the system displays a sandbox. D. If the user credentials do not match an Access Role, the system displays the Captive Portal.

Correct Answer: A

QUESTION NO: 5
In a ClusterXL high-availability environment, what MAC address will answer for Virtual IP in the default configuration?

A. MAC Address of Management Server B. MAC Address of Standby Member C. MAC address of Active Member D. Virtual MAC Address

Correct Answer: C

QUESTION NO: 6
Which process is available on any management product and on products that require direct GUI access, such as SmartEvent and provides GUI client communications, database manipulation, policy compilation and Management HA synchronization?

A. cpwd B. fwd C. fwm D. cpd

Correct Answer: C

QUESTION NO: 7
Match the following commands to their correct function.

Each command has one function only listed.

A. C1>F4; C2>F6; C3>F3; C4>F2 B. C1>F2; C2>F4; C3>F1; C4>F5 C. C1>F2; C2>F1; C3>F6; C4>F4 D. C1>F6; C2>F4; C3>F2; C4>F5

Correct Answer: D

QUESTION NO: 8
In the following cluster configuration; if you reboot sglondon_1 which device will be active when sglondon_1 is back up and running? Why?

A. sglondon_2 because it has highest priority. B. sglondon_1, because it is up again, sglondon_2 took over during reboot. C. sglondon_2 because sglondon_1 has highest IP. D. sglondon_1 because it the first configured object with the lowest IP.

Correct Answer: A

QUESTION NO: 9
Type the command and syntax to view critical devices on a cluster member in a ClusterXL environment.

Correct Answer:

cphaprob -ia list

CheckPoint Check Point Certified Security Expert Update - R80 - 156-915.80 Exam Questions