- All Exams Instant Download
The Correlation Unit performs all but which of the following actions:
The Correlation Unit performs all but which of the following actions:A . Marks logs that individually are not events, but may be part of a larger pattern to be identified laterB . Generates an event based on the Event policyC . Assigns a severity level to the eventD . Takes...
What are types of Check Point APIs available currently as part of R80.10 code?
What are types of Check Point APIs available currently as part of R80.10 code?A . Security Gateway API, Management API, Threat Prevention API and Identity Awareness Web Services APIB . Management API, Threat Prevention API, Identity Awareness Web Services API and OPSEC SDK APIC . OSE API, OPSEC SDK API,...
When synchronizing clusters, which of the following statements is FALSE?
When synchronizing clusters, which of the following statements is FALSE?A . The state of connections using resources is maintained in a Security Server, so their connections cannot be synchronized.B . Only cluster members running on the same OS platform can be synchronized.C . In the case of a failover, accounting...
Check Point recommends configuring Disk Space Management parameters to delete old log entities when available disk space is less than or equal to?
Check Point recommends configuring Disk Space Management parameters to delete old log entities when available disk space is less than or equal to?A . 50%B . 75%C . 80%D . 15%View AnswerAnswer: D Explanation: Reference: https://supportcenter.checkpoint.com/supportcenter/portal? eventSubmit_doGoviewsolutiondetails=&solutionid=sk110557
The “MAC magic” value must be modified under the following condition:
The “MAC magic” value must be modified under the following condition:A . There is more than one cluster connected to the same VLANB . A firewall cluster is configured to use Multicast for CCP trafficC . There are more than two members in a firewall clusterD . A firewall cluster...
The SmartEvent R80 Web application for real-time event monitoring is called:
The SmartEvent R80 Web application for real-time event monitoring is called:A . SmartView MonitorB . SmartEventWebC . There is no Web application for SmartEventD . SmartViewView AnswerAnswer: A Explanation: Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_LoggingAndMonitoring/ html_frameset.htm?topic=documents/R80/CP_R80_LoggingAndMonitoring/120829
In SmartEvent, what are the different types of automatic reactions that the administrator can configure?
In SmartEvent, what are the different types of automatic reactions that the administrator can configure?A . Mail, Block Source, Block Event Activity, External Script, SNMP TrapB . Mail, Block Source, Block Destination, Block Services, SNMP TrapC . Mail, Block Source, Block Destination, External Script, SNMP TrapD . Mail, Block Source,...
What is a feature that enables VPN connections to successfully maintain a private and secure VPN session without employing Stateful Inspection?
What is a feature that enables VPN connections to successfully maintain a private and secure VPN session without employing Stateful Inspection?A . Stateful ModeB . VPN Routing ModeC . Wire ModeD . Stateless ModeView AnswerAnswer: C Explanation: Wire Mode is a VPN-1 NGX feature that enables VPN connections to successfully...
Which component of SandBlast protection is her company using on a Gateway?
Vanessa is expecting a very important Security Report. The Document should be sent as an attachment via e-mail. An e-mail with Security_ report.pdf file was delivered to her e-mail inbox. When she opened the PDF file, she noticed that the file is basically empty and only few lines of text...
What is the port used for SmartConsole to connect to the Security Management Server:
What is the port used for SmartConsole to connect to the Security Management Server:A . CPMI port 18191/TCPB . CPM port / TCP port 19009C . SIC port 18191/TCPD . https port 4434/TCPView AnswerAnswer: A
