SandBlast has several functional components that work together to ensure that attacks are prevented in real-time. Which the following is NOT part of the SandBlastcomponent?
Your perimeter Security Gateway’sexternal IP is 200.200.200.3. Your network diagram shows:
Required: Allow only network 192.168.10.0 and 192.168.20.0 to go out to the Internet, using 200.200.200.5.
The local network 192.168.1.0/24 needs to use 200.200.200.3 to go out to the Internet.
Assuming you enable all the settings in the NAT page of Global Properties, how could you achieve these requirements?
Your primary Security Gateway runs on GAiA.What is the easiest way to back up your Security Gateway R80 configuration, including routing and network configuration files?
Because of pre-existing design constraints, you set up manual NAT rules for your HTTP server. However, your FTP server and SMTP server are both using automatic NAT rules. All traffic from your FTP and SMTP servers are passing through the Security Gateway without a problem, but traffic from the Web server is dropped on rule 0 because of anti-spoofing settings. What is causing this?
In order to get info about assignment (FW, SND) of all CPUs in your SGW, what is themost accurate CLI command?
GAiA greatly increases operational efficiency by offering an advanced and intuitive software update agent, commonly referred to as the:
If an administrator wants to add manual NAT for addresses not owned by the Check Point firewall, what else is necessary to becompleted for it to function properly?
Forinterfaces can you configure to use the Multi-Queue
a valid synchronization status?
Jack is using SmartEvent and does notsee the identities of the users on the events. As an administrator with full access, what does he need to do to fix his issue?
The essential means by which state synchronization works to provide failover in the event an active member goes down, ___________ is used specifically for clustered environments to allow gateways to report their own state and learn about the states of other members in the cluster.
You enable Hide NAT on the network object, 10.1.1.0 behind the Security Gateway’s external interface. You browse to the Google Website from host, 10.1.1.10 successfully. You enable a log on the rule that allows 10.1.1.0 to exit the network. How many log entries do you see for that connection in SmartView Tracker?
You cannot use SmartDashboard’s User Directory features to connect to the LDAP server. What should you investigate?
1) Verify you have read-only permissions as administrator for the operating system.
2) Verify there are no restrictions blocking SmartDashboard's User Manager from connecting to the LDAP server.
3) Check that the login Distinguished Name configured has root permission (or at least write permission Administrative access) in the LDAP Server's access control configuration.
Peter is your new Security Administrator. On his first working day, he is very nervous and enters the wrong password three times. His account is locked. What can bedone to unlock Peter’s account? Give the BEST answer.
An internal host initiates a session to the Google.com website and is set for Hide NAT behind the Security Gateway. The initiating traffic is an example of __________.
The third-shift Administrator was updating Security Management Server access settings in Global Properties and testing. He managed to lockhimself out of his account. How can you unlock this account?
Fill in the blank. You can set Acceleration to ON or OFF using command syntax ___________ .
How many pre-defined exclusions are included by default in SmartEvent R80 as part of the product installation?
How could you compare the Fingerprint shown to the Fingerprint on the server?
Exhibit:
What API command below creates a new host with the name “New Host” and IP address of “192.168.0.10”?
Charles requests a Website while using a computer not in thenet_singapore network.
What is TRUE about his location restriction?
Which command shows the current connections distributed by CoreXL FW instances?
Which Security Gateway R80 configuration setting forces the Client Authentication authorization time-out to refresh, each time a new user is authenticated? The:
ALL of the following options are provided by the GAiAsysconfig utility, EXCEPT:
Which operating systems are supported by a Check Point Security Gateway on an open server? Select MOST complete list.
Match the followingcommands to their correct function.
Each command has one function only listed.
You want to generate a cpinfo file via CLI on a system running GAiA. This will take about 40 minutes since the log files are also needed. What action do you need to take regarding timeout?
Looking at the SYN packets in the Wireshark output, select the statement that is true about NAT.
Your main internal network 10.10.10.0/24 allows all traffic to the Internet using Hide NAT. You also have a small network 10.10.20.0/24 behind the internal router. You want to configure the kernel to translate the source address only when network 10.10.20.0 tries to access the Internet for HTTP, SMTP, and FTP services. Which of the following configurations will allow this network to access the Internet?
The technical-support department has a requirement to access an intranet server. When configuring a User Authentication rule to achieve this, whichof the following should you remember?
After implementing Static Address Translation to allow Internet traffic to an internal Web Server on your DMZ, you notice that any NATed connections to that machine are being dropped by anti-spoofing protections. Which of the following is the MOST LIKELY cause?
Captive Portal is a __________ that allows the gateway to request login information from the user.
Your users are defined in a Windows 2008 R2 Active Directory server. You must add LDAP users to a Client Authentication rule. Which kind of user group do you need in the Client Authentication rule in R80?
You have configured Automatic Static NAT on aninternal host-node object. You clear the box Translate destination on client site from Global Properties > NAT. Assuming all other NAT settings in Global Properties are selected, what else must be configured so that a host on the Internet can initiate an inbound connection to this host?
Where is it necessary to configure historical records in SmartView Monitor to generate Express reports in SmartReporter?
Fill in the blank. To save your OSPF configuration in GAiA, enter the command ___________ .
What givesadministrators more flexibility when configuring Captive Portal instead of LDAP query for Identity Awareness authentication?
Fill in the blanks. To view thenumber of concurrent connections going through core 0 on the firewall, you would use the command and syntax __ __ _ ___ __ ___________ __ .
John is configuring a new R80 Gateway cluster but he can not configure the cluster as Third Party IP Clustering because thisoption is not available in Gateway Cluster Properties.
What’s happening?
When a packet is flowing through the security gateway, which one of the following is a valid inspection path?
How do you configure the Security Policy to provide user access to the Captive Portal through an external (Internet) interface?
To qualify as an Identity Awareness enabled rule, which column MAY include an Access Role?
Fill in the blank: TheR80 feature ________ permits blocking specific IP addresses for a specified time period.
Fill in the blank: The command _______________ provides the most complete restoration of a R80 configuration.
Which Check Point tool allows you to open a debug file and see the VPN packet exchange details.
Fill in the blank.
In Load SharingUnicast mode, the internal cluster IP address is 10.4.8.3. The internal interfaces on two members are 10.4.8.1 and 10.4.8.2. Internal host 10.4.8.108 Pings 10.4.8.3, and receives replies. The following is the ARP table from the internal Windows host 10.4.8.108. Review the exhibit and type the IP address of the member serving as the pivot machine in the space below.
What command syntax would you use to turn on PDP logging in a distributed environment?
Which statements about Management HA are correct?
1) Primary SmartCenter describes first installed SmartCenter
2) Active SmartCenter is always used to administrate with SmartConsole
3) Active SmartCenter describes first installed SmartCenter
4) Primary SmartCenter is always used to administrate with SmartConsole
What is the purpose of the pre-defined exclusions included with SmartEvent R80?
Review the Rule Base displayed.
For which rules will theconnection templates be generated in SecureXL?
You run cphaprob -a if. When you review the output, you find the word DOWN. What does DOWN mean?
MultiCorp is located in Atlanta. It has a branch office in Europe, Asia, and Africa. Each location has its own AD controller for local user login. How many ADqueries have to be configured?
Fill in the blank with a numericvalue. The default port number for standard TCP connections with the LDAP server is
Fill in the blank. To remove site-to-site IKE and IPSEC keys you would enter command ____ ___ and select the option to delete all IKE and IPSec SA’s.
MegaCorp is using SmartCenter Server with several gateways. Their requirements result in a heavy log load. Would it be feasible to add the SmartEvent Correlation Unit and SmartEvent Server to their SmartCenter Server?
DumpsMate's team of experts is always available to respond your queries on exam preparation. Get professional answers on any topic of the certification syllabus. Our experts will thoroughly satisfy you.
TESTED 26 Apr 2024
