- All Exams Instant Download
What is the best upgrade method when the management server is not connected to the Internet?
Customer’s R80 management server needs to be upgraded to R80.10. What is the best upgrade method when the management server is not connected to the Internet?A . Export R80 configuration, clean install R80.10 and import the configurationB . CPUSE online upgradeC . CPUSE offline upgradeD . SmartUpdate upgradeView AnswerAnswer: C...
Fill in the blank: An identity server uses a ___________ for user authentication.
Fill in the blank: An identity server uses a ___________ for user authentication.A . Shared secretB . CertificateC . One-time passwordD . TokenView AnswerAnswer: A Explanation: The answer is A because an identity server uses a shared secret for user authentication. A shared secret is a passphrase that is known...
When using Monitored circuit VRRP, what is a priority delta?
When using Monitored circuit VRRP, what is a priority delta?A . When an interface fails the priority changes to the priority deltaB . When an interface fails the delta claims the priorityC . When an interface fails the priority delta is subtracted from the priorityD . When an interface fails...
After trust has been established between the Check Point components, what is TRUE about name and IP-address changes?
After trust has been established between the Check Point components, what is TRUE about name and IP-address changes?A . Security Gateway IP-address cannot be changed without re-establishing the trustB . The Security Gateway name cannot be changed in command line without re-establishing trustC . The Security Management Server name cannot...
Assuming acceleration is enable which path is handling the traffic?
Traffic from source 192.168.1.1 is going to www.google.com. The Application Control Blade on the gateway is inspecting the traffic. Assuming acceleration is enable which path is handling the traffic?A . Slow PathB . Medium PathC . Fast PathD . Accelerated PathView AnswerAnswer: A Explanation: The correct answer is A because...
What is true about the IPS-Blade?
What is true about the IPS-Blade?A . in R80, IPS is managed by the Threat Prevention PolicyB . in R80, in the IPS Layer, the only three possible actions are Basic, Optimized and StrictC . in R80, IPS Exceptions cannot be attached to “all rules”D . in R80, the GeoPolicy...
When logging in for the first time to a Security management Server through SmartConsole, a fingerprint is saved to the:
When logging in for the first time to a Security management Server through SmartConsole, a fingerprint is saved to the:A . Security Management Server’s /home/.fgpt file and is available for future SmartConsole authentications.B . Windows registry is available for future Security Management Server authentications.C . There is no memory used...
Which of the following is NOT a tracking option? (Select three)
Which of the following is NOT a tracking option? (Select three)A . Partial logB . LogC . Network logD . Full logView AnswerAnswer: A, C, D Explanation: The options that are not tracking options are Partial log, Network log, and Full log. Tracking options are settings that determine how the...
What is an option for deployment of Check Point SandBlast Zero-Day Protection?
SandBlast offers flexibility in implementation based on their individual business needs. What is an option for deployment of Check Point SandBlast Zero-Day Protection?A . Smart Cloud ServicesB . Load Sharing Mode ServicesC . Threat Agent SolutionD . Public Cloud ServicesView AnswerAnswer: A Explanation: Smart Cloud Services is an option for...
Using R80 Smart Console, what does a “pencil icon” in a rule mean?
Using R80 Smart Console, what does a “pencil icon” in a rule mean?A . I have changed this ruleB . Someone else has changed this ruleC . This rule is managed by check point’s SOCD . This rule can’t be changed as it’s an implied ruleView AnswerAnswer: A Explanation: The...
