Question 1

What level of CPU load on a Secure Network Distributor would indicate that another may be necessary?

Accepted Answer

Idle <20% indicates that the CPU is not being fully utilized and another Secure Network Distributor may be necessary to handle the load.

Question 2

Firewall policies must be configured to accept VRRP packets on the GAiA platform if it runs Firewall software. The Multicast destination assigned by the Internet Assigned Number Authority (IANA) for VRRP is:

Accepted Answer

The multicast IP address 224.0.0.18 is assigned by IANA for VRRP (Virtual Router Redundancy Protocol).

Question 3

What ports are used for SmartConsole to connect to the Security Management Server?

Accepted Answer

The answer of What ports are used for SmartConsole to...

Question 4

Which of the following is a task of the CPD process?

Accepted Answer

The answer of Which of the following is a task...

Question 5

How does the Anti-Virus feature of the Threat Prevention policy block traffic from infected websites?

Accepted Answer

The answer of How does the Anti-Virus feature of the...

Question 6

Which member of a high-availability cluster should be upgraded first in a Zero downtime upgrade?

Accepted Answer

During the upgrade procedure, standby members are upgraded first. When upgrade on the final active member begins, the active member fails over to the standby member (or members, depending on the deployment: High Availability or Load Sharing). At this point, since connection tables between cluster members are not synced, all open connections are lost. Only a full connectivity upgrade (between minor versions) preserves open connections.

Question 7

After verifying that API Server is not running, how can you start the API Server?

Accepted Answer

The answer of After verifying that API Server is not...

Question 8

In Threat Prevention, you can create new or clone profiles but you CANNOT change the out-of-the-box profiles of:

Accepted Answer

The out-of-the-box profiles that cannot be changed in Threat Prevention are Basic, Optimized, and Strict. These profiles are predefined and locked to ensure consistent security settings.

Question 9

The Compliance Blade allows you to search for text strings in many windows and panes, to search for a value in a field, what would your syntax be?

Accepted Answer

The correct syntax to search for a value in a field using the Compliance Blade is "field_name:string", where "field_name" is the name of the field and "string" is the value you are searching for.

Question 10

Which Remote Access Client does not provide an Office-Mode Address?

Accepted Answer

SecuRemote does not provide an Office-Mode Address, as it is a basic VPN client without the advanced features of the other options.

Question 11

What is the recommended configuration when the customer requires SmartLog indexing for 14 days and SmartEvent to keep events for 180 days?

Accepted Answer

The recommended configuration is to choose different settings for log storage and SmartEvent database to accommodate the different retention requirements for SmartLog indexing and SmartEvent.

Question 12

What feature allows Remote-access VPN users to access resources across a site-to-site VPN tunnel?

Accepted Answer

The answer of What feature allows Remote-access VPN users to...

Question 13

What is required for a certificate-based VPN tunnel between two gateways with separate management systems?

Accepted Answer

Mutually trusted certificate authorities are required to validate the certificates used in establishing a secure VPN tunnel between two gateways managed separately.

Question 14

What are the main stages of a policy installation?

Accepted Answer

The main stages of a policy installation typically include Verification, Compilation, Transfer, and Commit. These stages ensure that the policy is correctly formatted, compiled into a format that can be understood by the system, transferred to the appropriate devices, and then committed to be active.

Question 15

When performing a minimal effort upgrade, what will happen to the network traffic?

Accepted Answer

The answer of When performing a minimal effort upgrade, what...

Question 16

Can Check Point and Third-party Gateways establish a certificate-based Site-to-Site VPN tunnel?

Accepted Answer

Check Point and third-party gateways can establish a certificate-based Site-to-Site VPN tunnel if they have a mutually trusted certificate authority, which allows them to authenticate each other using certificates.

Question 17

You need to change the MAC-address on eth2 interface of the gateway. What is the correct way to change MAC-address in Check Point Gaia?

Accepted Answer

In Check Point Gaia, the correct command to change the MAC address of an interface is using CLISH with the command "set interface eth2 mac-addr".

Question 18

What traffic does the Anti-bot feature block?

Accepted Answer

The Anti-bot feature is designed to block Command and Control traffic from hosts that have been identified as infected, preventing them from communicating with malicious servers.

Question 19

What destination versions are supported for a Multi-Version Cluster Upgrade?

Accepted Answer

The answer of What destination versions are supported for a...

Question 20

What are the blades of Threat Prevention?

Accepted Answer

The blades of Threat Prevention typically include IPS (Intrusion Prevention System), AntiVirus, AntiBot, and Threat Emulation/Extraction. These components work together to protect against various types of cyber threats.

Exam 3: Check Point Certified Security Expert - R80