What is the difference between disabling SecureXL by running “fwaccel off” and disabling it via cpconfig?
What is the difference between disabling SecureXL by running “fwaccel off” and disabling it via cpconfig?A . Disabling SecureXL in cpconfig survives rebootB . cpconfig option is available only on the security managerC . There is no difference. These are two different ways of accomplishing the same taskD . “fwaccel...
Which daemon would you debug if you have issues acquiring identities via identity sharing and identities with other gateways?
Which daemon would you debug if you have issues acquiring identities via identity sharing and identities with other gateways?A . pdpdB . wstlsdC . iadD . pepdView AnswerAnswer: A Explanation: Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_IdentityAwareness_AdminGuide/66477.htm
Which of the connections cannot be accelerated with SecureXL?
Which of the connections cannot be accelerated with SecureXL?A . Every NAT’ed connectionB . Every encrypted connection, such as HTTPS or SSH connectionsC . Every connection destined to the Security GatewaysD . Every connection through a rule using a time objectView AnswerAnswer: A
What occurs when Bypass Under Load activated?
What occurs when Bypass Under Load activated?A . Packets are forwarded to the destination without checking the packets against the firewall rule baseB . Packets are forwarded to the destination without performing IPS analysisC . To still ensure a minimum level of data integrity, the system revert to the use...
What mechanism can be used to confirm that important traffic such as control connections are not dropped?
Consider a Check Point Security Gateway under high load. What mechanism can be used to confirm that important traffic such as control connections are not dropped?A . fw debug fgd50 on OPSEC_DEBUG_LEVEL=3B . fw ctl multik prioqC . fgate Cd loadD . fw ctl debug Cm fg allView AnswerAnswer: B
How many layers are incorporated in IPS detection and what are they called?
How many layers are incorporated in IPS detection and what are they called?A . 4 layers C Passive Streaming Library (PSL), Protocol Parsers, Context Management, ProtectionsB . 3 layers C Active Streaming Library (ASL), CMI, ProtectionsC . 4 layers C Active Streaming Library (ASL), Protocol Parsers, Context Management, ProtectionsD ....
In order to test ClusterXL failovers which command would you use on one of the ClusterXL nodes to initiate a failover?
In order to test ClusterXL failovers which command would you use on one of the ClusterXL nodes to initiate a failover?A . clusterXL_admin down -pB . cluster XL_admin up -pC . cphaprob -d TEST -s ok registerD . cphaprob -d TEST -s problem unregisterView AnswerAnswer: A Explanation: Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_ClusterXL_AdminGuide/7298.htm#o97358
What is the default and maximum number of entries in the ARP Cache Table in a Check Point appliance?
What is the default and maximum number of entries in the ARP Cache Table in a Check Point appliance?A . 1,024 and 4,096B . 4,096 and 16,384C . 4,096 and 65,536D . 1,024 and 16,384View AnswerAnswer: D Explanation: Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Gaia_WebAdmin/73181.htm
What is the correct command to turn off an IKE debug?
What is the correct command to turn off an IKE debug?A . vpn debug ikeoffB . fw ctl debug ikeoffC . vpn debug ikeoff 0D . fw ctl vpn debug ikeoffView AnswerAnswer: A Explanation: Reference: https://community.checkpoint.com/docs/DOC-3023-vpn-troubleshooting-commands
When enabling hyper-threading on a Security Gateway, the administrator needs to make sure there is enough _______________ to support additional CoreXL Firewall instances.
When enabling hyper-threading on a Security Gateway, the administrator needs to make sure there is enough _______________ to support additional CoreXL Firewall instances.A . drive spaceB . cpu’sC . available cacheD . available memoryView AnswerAnswer: D Explanation: Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk93000