Question 1

At what point is the Internal Certificate Authority (ICA) created?

Options :

A : Upon creation of a certificate.

B : During the primary Security Management Server installation process.

C : When an administrator decides to create one.

D : When an administrator initially logs into SmartConsole.

Answer: B

Question 2

Which upgrade method you should use upgrading from R80.40 to R81.20 to avoid any downtime?

Options :

A : Zero Downtime Upgrade (ZDU)

B : Connectivity Upgrade (CU)

C : Minimal Effort Upgrade (ME)

D : Multi-Version Cluster Upgrade (MVC)

Answer: D

Question 3

After trust has been established between the Check Point components, what is TRUE about name and IP-address changes?

Options :

A : Security Gateway IP-address cannot be changed without re-establishing the trust.

B : The Security Gateway name cannot be changed in command line without re-establishing trust.

C : The Security Management Server name cannot be changed in SmartConsole without re-establishing trust.

D : The Security Management Server IP-address cannot be changed without re-establishing the trust.

Answer: A

Question 4

Selecting an event displays its configurable properties in the Detail pane and a description of the event in the Description pane. Which is NOT an option to adjust or configure?

Options :

A : Severity

B : Automatic reactions

C : Policy

D : Threshold

Answer: C

Question 5

Pamela is Cyber Security Engineer working for Global Instance Firm with large scale deployment of Check Point Enterprise Appliances using GAiA/R81.20. Company’s Developer Team is having random access issue to newly deployed Application Server in DMZ’s Application Server Farm Tier and blames DMZ Security Gateway as root cause. The ticket has been created and issue is at Pamela’s desk for an investigation. Pamela decides to use Check Point’s Packet Analyzer Tool-fw monitor to iron out the issue during approved Maintenance window. What do you recommend as the best suggestion for Pamela to make sure she successfully captures entire traffic in context of Firewall and problematic traffic?The best suggestion for Pamela to make sure she successfully captures entire traffic in context of Firewall and problematic traffic is: Pamela should check SecureXL status on DMZ Security gateway and if it’s turned ON. She should turn OFF SecureXL before using fw monitor to avoid misleading traffic captures. SecureXL is a technology that accelerates network traffic processing by offloading intensive operations from the Firewall kernel to a dedicated SecureXL device. However, this also means that some traffic might not be seen by fw monitor, which is a tool that captures packets at different inspection points in the Firewall kernel. Therefore, to ensure that fw monitor captures all traffic, SecureXL should be turned OFF before using fw monitor. The other suggestions are either incorrect or less effective in capturing traffic.

Options :

A : Pamela should check SecureXL status on DMZ Security gateway and if it-s turned ON. She should turn OFF SecureXL before using fw monitor to avoid misleading traffic captures.

B : Pamela should check SecureXL status on DMZ Security Gateway and if it-s turned OFF. She should turn ON SecureXL before using fw monitor to avoid misleading traffic captures.

C : Pamela should use tcpdump over fw monitor tool as tcpdump works at OS-level and captures entire traffic.

D : Pamela should use snoop over fw monitor tool as snoop works at NIC driver level and captures entire traffic.

Answer: A

Free 156-315.81.20 Mock Exam – Practice Online Confidently

Buying Options: