Which packet info is ignored with Session Rate Acceleration?
Which packet info is ignored with Session Rate Acceleration?A . source port rangesB . source ipC . source portD . same info from Packet Acceleration is usedView AnswerAnswer: C Explanation: Session Rate Acceleration is a SecureXL feature that accelerates the establishment of new connections by bypassing the inspection of the...
Which command collects diagnostic data for analyzing customer setup remotely?
Which command collects diagnostic data for analyzing customer setup remotely?A . cpinfoB . migrate exportC . sysinfoD . cpviewView AnswerAnswer: A Explanation: CPInfo is an auto-updatable utility that collects diagnostics data on a customer's machine at the time of execution and uploads it to Check Point servers (it replaces the...
What is the difference between an event and a log?
What is the difference between an event and a log?A . Events are generated at gateway according to Event PolicyB . A log entry becomes an event when it matches any rule defined in Event PolicyC . Events are collected with SmartWorkflow form Trouble Ticket systemsD . Log and Events...
What is the mechanism behind Threat Extraction?
What is the mechanism behind Threat Extraction?A . This a new mechanism which extracts malicious files from a document to use it as a counter-attack against its sender.B . This is a new mechanism which is able to collect malicious files out of any kind of file types to destroy...
The Firewall kernel is replicated multiple times, therefore:
The Firewall kernel is replicated multiple times, therefore:A . The Firewall kernel only touches the packet if the connection is acceleratedB . The Firewall can run different policies per coreC . The Firewall kernel is replicated only with new connections and deletes itself once the connection times outD . The...
What has to be taken into consideration when configuring Management HA?
What has to be taken into consideration when configuring Management HA? A. The Database revisions will not be synchronized between the management servers B. SmartConsole must be closed prior to synchronized changes in the objects database C. If you wanted to use Full Connectivity Upgrade, you must change the Implied...
Which view is NOT a valid CPVIEW view?
Which view is NOT a valid CPVIEW view?A . IDAB . RADC . PDPD . VPNView AnswerAnswer: C Explanation: PDP is not a valid CPVIEW view. CPVIEW is a command-line tool that shows the status of different system parameters, such as CPU, memory, disk, network, and firewall. The valid views...
The CPD daemon is a Firewall Kernel Process that does NOT do which of the following?
The CPD daemon is a Firewall Kernel Process that does NOT do which of the following?A . Secure Internal Communication (SIC)B . Restart Daemons if they failC . Transfers messages between Firewall processesD . Pulls application monitoring statusView AnswerAnswer: D Explanation: The CPD daemon is a Firewall Kernel Process that...
If you needed the Multicast MAC address of a cluster, what command would you run?
If you needed the Multicast MAC address of a cluster, what command would you run?A . cphaprob Ca ifB . cphaconf ccp multicastC . cphaconf debug dataD . cphaprob igmpView AnswerAnswer: D Explanation: The command cphaprob igmp can be used to display the Multicast MAC address of a cluster. This...
To fully enable Dynamic Dispatcher on a Security Gateway:
To fully enable Dynamic Dispatcher on a Security Gateway:A . run fw ctl multik set_mode 9 in Expert mode and then Reboot.B . Using cpconfig, update the Dynamic Dispatcher value to “full” under the CoreXL menu.C . Edit/proc/interrupts to include multik set_mode 1 at the bottom of the file, save,...