Question 1

To view the policy installation history for each gateway, which Access Tool in SmartConsole would an administrator use?

Accepted Answer

The "Installation history" tool in SmartConsole allows administrators to view the policy installation history for each gateway.

Question 2

Which icon in the WebUI indicates that read/write access is enabled?

Accepted Answer

The pencil icon typically represents the ability to edit or write, indicating read/write access.

Question 3

By default, the SIC certificates issued by R80 Management Server are based on the ____________ algorithm.

Accepted Answer

SHA-256 is the default algorithm used by R80 Management Server for issuing SIC certificates.

Question 4

Which backup utility captures the most information and tends to create the largest archives?

Accepted Answer

Snapshots capture the entire state of a system or data at a specific point in time, including all files and settings, which typically results in larger archives compared to other backup methods.

Question 5

An administrator wishes to enable Identity Awareness on the Check Point firewalls. However, they allow users to use company issued or personal laptops. Since the administrator cannot manage the personal laptops, which of the following methods would BEST suit this company?

Accepted Answer

Browser-Based Authentication is suitable for environments where the administrator cannot manage personal devices, as it allows users to authenticate via a web browser without needing to install any software on their devices.

Question 6

When should you generate new licenses?

Accepted Answer

The answer of When should you generate new licenses?
...

Question 7

Which Threat Tool within SmartConsole provides a list of trusted files to the administrator so they can specify to the Threat Prevention blade that these files do not need to be scanned or analyzed?

Accepted Answer

The answer of Which Threat Tool within SmartConsole provides a...

Question 8

One of major features in R80.x SmartConsole is concurrent administration. Which of the following is NOT possible considering that AdminA, AdminB, and AdminC are editing the same Security Policy?

Accepted Answer

In SmartConsole, administrators work with sessions. A session is created each time an administrator logs into SmartConsole. Changes made in the session are saved automatically. These changes are private and available only to the administrator. To avoid configuration conflicts, other administrators see a lock icon on objects and rules that are being edited in other sessions.

Question 9

What is the BEST command to view configuration details of all interfaces in Gaia CLISH?

Accepted Answer

The answer of What is the BEST command to view...

Question 10

What are the three deployment options available for a security gateway?

Accepted Answer

The answer of What are the three deployment options available...

Question 11

To create a policy for traffic to or from a specific geographical location, use the _____________.

Accepted Answer

Shared Policies The   section in the  Security Policies  shows the policies that are not in a Policy package. They are shared between all Policy packages. Shared policies are installed with the Access Control Policy.

Question 12

A Check Point Software license consists of two components, the Software Blade and the Software Container. There are ______________ types of Software Containers: ______________.

Accepted Answer

Check Point Software Containers are of three types: Security Management, Security Gateway, and Endpoint Security.

Question 13

Which of the following is NOT a tracking option? (Choose three.)

Accepted Answer

The answer of Which of the following is NOT a...

Question 14

When configuring LDAP User Directory integration, changes applied to a User Directory template are:

Accepted Answer

The users and user groups are arranged on the Account Unit in the tree structure of the LDAP server. User management in User Directory is external, not local. You can change the User Directory templates. Users associated with this template get the changes immediately. You can change user definitions manually in SmartDashboard, and the changes are immediate on the server.

Question 15

Administrator Dave logs into R80 Management Server to review and makes some rule changes. He notices that there is a padlock sign next to the DNS rule in the Rule Base.  What is the possible explanation for this?

Accepted Answer

The answer of Administrator Dave logs into R80 Management Server...

Question 16

What does it mean if Deyra sees the gateway status:

Accepted Answer

11ec3b16_46e1_b91f_ab8d_2f0cbfa95c98_C1171_00

Question 17

Which of the following is NOT a valid option when configuring access for Captive Portal?

Accepted Answer

Captive Portal access is typically configured through internal interfaces, all interfaces, or according to the firewall policy, but not directly from the Internet.

Question 18

To ensure that VMAC mode is enabled, which CLI command you should run on all cluster members?

Accepted Answer

The answer of To ensure that VMAC mode is enabled,...

Question 19

When a Security Gateways sends its logs to an IP address other than its own, which deployment option is installed?

Accepted Answer

In a distributed deployment, the Security Gateway and the Security Management Server are installed on separate machines, allowing logs to be sent to a different IP address.

Question 20

In SmartConsole, objects are used to represent physical and virtual network components and also some logical components. These objects are divided into several categories. Which of the following is NOT an objects category?

Accepted Answer

IP Address is not a category of objects in SmartConsole; it is a property of network objects.

Exam 2: Check Point Certified Security Administrator (CCSA R80)