Which of the following is NOT an internal/native Check Point command?
Which of the following is NOT an internal/native Check Point command?A . fwaccel onB . fw ct1 debugC . tcpdumpD . cphaprobView AnswerAnswer: C
What Shell is required in Gaia to use WinSCP?
What Shell is required in Gaia to use WinSCP?A . UNIXB . CPShellC . CLISHD . BashView AnswerAnswer: D Explanation: Reference: https://winscp.net/eng/docs/ui_login_scp
Which of these options is an implicit MEP option?
Which of these options is an implicit MEP option?A . Primary-backupB . Source address basedC . Round robinD . Load SharingView AnswerAnswer: A Explanation: There are three methods to implement implicit MEP: - First to Respond, in which the first Security Gateway to reply to the peer Security Gateway is...
Which command collects diagnostic data for analyzing customer setup remotely?
Which command collects diagnostic data for analyzing customer setup remotely?A . cpinfoB . migrate exportC . sysinfoD . cpviewView AnswerAnswer: A Explanation: CPInfo is an auto-updatable utility that collects diagnostics data on a customer's machine at the time of execution and uploads it to Check Point servers (it replaces the...
On R80.10 the IPS Blade is managed by:
On R80.10 the IPS Blade is managed by:A . Threat Protection policyB . Anti-Bot BladeC . Threat Prevention policyD . Layers on Firewall policyView AnswerAnswer: A Explanation: Reference: https://www.checkpoint.com/downloads/product-related/r80.10-mgmt-architecture-overview.pdf very top of last page.
How can you enable them?
You noticed that CPU cores on the Security Gateway are usually 100% utilized and many packets were dropped. You don’t have a budget to perform a hardware upgrade at this time. To optimize drops you decide to use Priority Queues and fully enable Dynamic Dispatcher. How can you enable them?A...
What is an option for deployment of Check Point SandBlast Zero-Day Protection?
SandBlast offers flexibility in implementation based on their individual business needs. What is an option for deployment of Check Point SandBlast Zero-Day Protection?A . Smart Cloud ServicesB . Load Sharing Mode ServicesC . Threat Agent SolutionD . Public Cloud ServicesView AnswerAnswer: C Explanation: Reference: https://www.checkpoint.com/products/threat-emulation-sandboxing/
Which components allow you to reset a VPN tunnel?
Which components allow you to reset a VPN tunnel?A . vpn tucommand or SmartView monitorB . delete vpn ike saor vpn she11 commandC . vpn tunnelutilor delete vpn ike sa commandD . SmartView monitor onlyView AnswerAnswer: D
Which packet info is ignored with Session Rate Acceleration?
Which packet info is ignored with Session Rate Acceleration?A . source port rangesB . source ipC . source portD . same info from Packet Acceleration is usedView AnswerAnswer: C Explanation: Reference: http://trlj.blogspot.com/2015/10/check-point-acceleration.html
The Firewall kernel is replicated multiple times, therefore:
The Firewall kernel is replicated multiple times, therefore:A . The Firewall kernel only touches the packet if the connection is acceleratedB . The Firewall can run different policies per coreC . The Firewall kernel is replicated only with new connections and deletes itself once the connection times outD . The...