NEW QUESTION 1

You are MegaCorp’s Security Administrator. There are various network objects which must be NATed. Some of them use the Automatic Hide NAT method, while others use the Automatic Static NAT method. What is the rule order if both methods are used together? Give the BEST answer.

• A. The Administrator decides the rule order by shifting the corresponding rules up and down.
• B. The Static NAT rules have priority over the Hide NAT rules and the NAT on a node has priority over the NAT on a network or an address range.
• C. The Hide NAT rules have priority over the Static NAT rules and the NAT on a node has priority over the NAT on a network or an address range.
• D. The rule position depends on the time of their creatio
• E. The rules created first are placed at the top; rules created later are placed successively below the others.

Answer: B

NEW QUESTION 2

You find that Gateway fw2 can NOT be added to the cluster object. What are possible reasons for that?
Exhibit:

1) fw2 is a member in a VPN community.
2) ClusterXL software blade is not enabled on fw2.
3) fw2 is a DAIP Gateway.

• A. 2 or 3
• B. 1 or 2
• C. 1 or 3
• D. All

Answer: C

NEW QUESTION 3
Reboot both gateways.

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 4

Which of the following are authentication methods that Security Gateway R77 uses to validate connection attempts? Select the response below that includes the MOST complete list of valid authentication methods.

• A. Proxied, User, Dynamic, Session
• B. Connection, User, Client
• C. User, Client, Session
• D. User, Proxied, Session

Answer: C

NEW QUESTION 5

Assume you are a Security Administrator for ABCTech. You have allowed authenticated access to users from Mkting_net to Finance_net. But in the user’s properties, connections are only permitted within Mkting_net. What is the BEST way to resolve this conflict?

• A. Select Ignore Database in the Action Properties window.
• B. Permit access to Finance_net.
• C. Select Intersect with user database in the Action Properties window.
• D. Select Intersect with user database or Ignore Database in the Action Properties window.

Answer: D

NEW QUESTION 6
CORRECT TEXT
Fill in the blank. To verify SecureXL statistics, you would use the command .

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 7

When restoring R77 using the command upgrade_import, which of the following items are NOT restored?

• A. SIC Certificates
• B. Licenses
• C. Route tables
• D. Global properties

Answer: C

NEW QUESTION 8

Which command would provide the most comprehensive diagnostic information to Check Point Technical Support?

• A. fw cpinfo
• B. cpinfo -o date.cpinfo.txt
• C. diag
• D. cpstat - date.cpstat.txt

Answer: B

NEW QUESTION 9
CORRECT TEXT
Fill in the blank. You can set Acceleration to ON or OFF using command syntax ____ .

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 10
CORRECT TEXT
Type the full fw command and syntax that allows you to disable only sync on a cluster firewall member.

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 11

In SmartDashboard, Translate destination on client side is checked in Global Properties. When Network Address Translation is used:

• A. It is not necessary to add a static route to the Gateway’s routing table.
• B. It is necessary to add a static route to the Gateway’s routing table.
• C. The Security Gateway’s ARP file must be modified.
• D. VLAN tagging cannot be defined for any hosts protected by the Gateway.

Answer: A

NEW QUESTION 12

All R77 Security Servers can perform authentication with the exception of one. Which of the Security Servers can NOT perform authentication?

• A. FTP
• B. SMTP
• C. HTTP
• D. RLOGIN

Answer: B

NEW QUESTION 13

Your users are defined in a Windows 2008 R2 Active Directory server. You must add LDAP users to a Client Authentication rule. Which kind of user group do you need in the Client Authentication rule in R77?

• A. External-user group
• B. LDAP group
• C. A group with a generic user
• D. All Users

Answer: B

NEW QUESTION 14

You have selected the event Port Scan from Internal Network in SmartEvent, to detect an event when 30 port scans have occurred within 60 seconds. You also want to detect two port scans from a host within 10 seconds of each other. How would you accomplish this?

• A. Define the two port-scan detections as an exception.
• B. You cannot set SmartEvent to detect two port scans from a host within 10 seconds of each other.
• C. Select the two port-scan detections as a sub-event.
• D. Select the two port-scan detections as a new event.

Answer: A

NEW QUESTION 15

What is the purpose of the pre-defined exclusions included with SmartEvent R77?

• A. To allow SmartEvent R77 to function properly with all other R71 devices.
• B. To avoid incorrect event generation by the default IPS event definition; a scenario that may occur in deployments that include Security Gateways of versions prior to R71.
• C. As a base for starting and building exclusions.
• D. To give samples of how to write your own exclusion.

Answer: B

NEW QUESTION 16

Which of the following items should be configured for the Security Management Server to authenticate via LDAP?

• A. Check Point Password
• B. Active Directory Server object
• C. Windows logon password
• D. WMI object

Answer: B

NEW QUESTION 17
......