NEW QUESTION 1

Match the following commands to their correct function.

Each command has one function only listed.

• A. C1>F6; C2>F4; C3>F2; C4>F5
• B. C1>F2; C2>F1; C3>F6; C4>F4
• C. C1>F2; C2>F4; C3>F1; C4>F5
• D. C1>F4; C2>F6; C3>F3; C4>F2

Answer: A

NEW QUESTION 2

You are the Security Administrator for ABC-Corp. A Check Point Firewall is installed and in use on GAiA. You are concerned that the system might not be retaining your entries for the interfaces and routing configuration. You would like to verify your entries in the corresponding file(s) on GAiA. Where can you view them? Give the BEST answer.

• A. /etc/sysconfig/netconf.C
• B. /etc/conf/route.C
• C. /etc/sysconfig/network-scripts/ifcfg-ethx
• D. /etc/sysconfig/network

Answer: A

NEW QUESTION 3

Select the command set best used to verify proper failover function of a new ClusterXL configuration.

• A. reboot
• B. cphaprob -d failDevice -s problem -t 0 register / cphaprob -d failDevice unregister
• C. clusterXL_admin down / clusterXL_admin up
• D. cpstop/cpstart

Answer: C

NEW QUESTION 4

How granular may an administrator filter an Access Role with identity awareness? Per:

• A. Specific ICA Certificate
• B. AD User
• C. Radius Group
• D. Windows Domain

Answer: B

NEW QUESTION 5

Which command will only show the number of entries in the connection table?

• A. fw tab -t connections -s
• B. fw tab -t connections -u
• C. fw tab -t connections
• D. fw tab

Answer: A

NEW QUESTION 6

Where is it necessary to configure historical records in SmartView Monitor to generate Express reports in SmartReporter?

• A. In SmartDashboard, the SmartView Monitor page in the R77 Security Gateway object
• B. In SmartReporter, under Express > Network Activity
• C. In SmartReporter, under Standard > Custom
• D. In SmartView Monitor, under Global Properties > Log and Masters

Answer: A

NEW QUESTION 7

Your organization’s disaster recovery plan needs an update to the backup and restore section to reap the new distributed R77 installation benefits. Your plan must meet the following required and desired objectives:
Required Objective: The Security Policy repository must be backed up no less frequently than every 24 hours.
Desired Objective: The R77 components that enforce the Security Policies should be backed up at least once a week.
Desired Objective: Back up R77 logs at least once a week.
Your disaster recovery plan is as follows:
- Use the cron utility to run the command upgrade_export each night on the Security Management Servers.
- Configure the organization's routine back up software to back up the files created by the command upgrade_export.
- Configure the GAiA back up utility to back up the Security Gateways every Saturday night.
- Use the cron utility to run the command upgrade_export each Saturday night on the log servers.
- Configure an automatic, nightly logswitch.
- Configure the organization's routine back up software to back up the switched logs every night.
Upon evaluation, your plan:

• A. Meets the required objective and only one desired objective.
• B. Meets the required objective but does not meet either desired objective.
• C. Does not meet the required objective.
• D. Meets the required objective and both desired objectives.

Answer: D

NEW QUESTION 8

When configuring numbered VPN Tunnel Interfaces (VTIs) in a clustered environment, what issues need to be considered?
1) Each member must have a unique source IP address.
2) Every interface on each member requires a unique IP address.
3) All VTI's going to the same remote peer must have the same name.
4) Cluster IP addresses are required.

• A. 1, 2, and 4
• B. 2 and 3
• C. 1, 2, 3 and 4
• D. 1, 3, and 4

Answer: C

NEW QUESTION 9
CORRECT TEXT
Fill in the blank.

In New Mode HA, the internal cluster IP VIP address is 10.4.8.3. The internal interfaces on two members are 10.4.8.1 and 10.4.8.2 Internal host 10.4.8.108 pings 10.4.8.3, and receives replies. Review the ARP table from the internal Windows host 10.4.8.108. According to the output, which member is the standby machine?

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 10

Which of the following statements accurately describes the command snapshot?

• A. snapshot creates a full OS-level backup, including network-interface data, Check Point product information, and configuration settings during an upgrade of a GAiA Security Gateway.
• B. snapshot creates a Security Management Server full system-level backup on any OS.
• C. snapshot stores only the system-configuration settings on the Gateway.
• D. A Gateway snapshot includes configuration settings and Check Point product information from the remote Security Management Server.

Answer: A

NEW QUESTION 11

You are about to integrate RSA SecurID users into the Check Point infrastructure. What kind of users are to be defined via SmartDashboard?

• A. A group with generic user
• B. All users
• C. LDAP Account Unit Group
• D. Internal user Group

Answer: A

NEW QUESTION 12

Which of the following is the preferred method for adding static routes in GAiA?

• A. In the CLI with the command “route add”
• B. In Web Portal, under Network Management > IPv4 Static Routes
• C. In the CLI via sysconfig
• D. In SmartDashboard under Gateway Properties > Topology

Answer: B

NEW QUESTION 13

You are a Security Administrator who has installed Security Gateway R77 on your network. You need to allow a specific IP address range for a partner site to access your intranet Web server. To limit the partner’s access for HTTP and FTP only, you did the following:
1) Created manual Static NAT rules for the Web server.
2) Cleared the following settings in the Global Properties > Network Address Translation screen:
- Allow bi-directional NAT
- Translate destination on client side
Do the above settings limit the partner’s access?

• A. Ye
• B. This will ensure that traffic only matches the specific rule configured for this traffic, and that the Gateway translates the traffic after accepting the packet.
• C. N
• D. The first setting is not applicabl
• E. The second setting will reduce performance.
• F. Ye
• G. Both of these settings are only applicable to automatic NAT rules.
• H. N
• I. The first setting is only applicable to automatic NAT rule
• J. The second setting will force translation by the kernel on the interface nearest to the client.

Answer: D

NEW QUESTION 14

John is configuring a new R77 Gateway cluster but he can not configure the cluster as Third Party IP Clustering because this option is not available in Gateway Cluster Properties.

What’s happening?

• A. ClusterXL needs to be unselected to permit third party clustering configuration.
• B. Third Party Clustering is not available for R77 Security Gateways.
• C. John has an invalid ClusterXL license.
• D. John is not using third party hardware as IP Clustering is part of Check Point’s IP Appliance.

Answer: A

NEW QUESTION 15
Install the Security Policy.

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 16

When do modifications to the Event Policy take effect?

• A. As soon as the Policy Tab window is closed.
• B. When saved on the SmartEvent Server and installed to the Correlation Units.
• C. When saved on the Correlation Units, and pushed as a policy.
• D. When saved on the SmartEvent Client, and installed on the SmartEvent Server.

Answer: B

NEW QUESTION 17
......