NO.25 The Firewall kernel is replicated multiple times, therefore:

NO.26 Check Pont Central Deployment Tool (CDT) communicates with the Security Gateway / Cluster Members
over Check Point SIC _____________ .

NO.27 When gathering information about a gateway using CPINFO, what information is included or excluded when using the “-x” parameter?

NO.28 Which of the following is NOT a VPN routing option available in a star community?

NO.29 Which statement is not TRUE about Default synchronization?

NO.30 SmartEvent does NOT use which of the following procedures to identify events:

NO.31 In the Check Point Firewall Kernel Module, each Kernel is associated with a key, which specifies the type of traffic applicable to the chain module. For Wire Mode configuration, chain modules marked with
____________ will not apply.

NO.32 Sticky Decision Function (SDF) is required which to prevent which of the following? Assume you set up an Active cluster.

NO.33 The Firewall Administrator is required to create 100 new host objects with different IP addresses. What API command can he use in the script to achieve the requirement?

NO.34 What are the different command sources that allow you to communicate with the API server?

NO.35 Which TCP-port does CPM process listen to?

NO.36 Pamela is Cyber Security Engineer working for Global Instance Firm with large scale deployment of Check Point Enterprise Appliances using GAiA/R80.10. Company’s Developer Team is having random access issue to newly deployed Application Server in DMZ’s Application Server Farm Tier and blames DMZ Security Gateway as root cause. The ticket has been created and issue is at Pamela’s desk for an investigation. Pamela decides to use Check Point’s Packet Analyzer Tool-fw monitor to iron out the issue during approved Maintenance window. What do you recommend as the best suggestion for Pamela to make sure she successfully captures entire traffic in context of Firewall and problematic traffic?

NO.37 Fill in the blank: The R80 feature _____ permits blocking specific IP addresses for a specified time period.

NO.38 Office mode means that:

NO.39 Which Mobile Access Application allows a secure container on Mobile devices to give users access to internal website, file share and emails?

NO.40 What needs to be configured if the NAT property ‘Translate destination or client side’ is not enabled in Global Properties?

NO.41 Which command is used to set the CCP protocol to Multicast?

NO.42 How often does Threat Emulation download packages by default?

NO.43 Which one of the following is true about Capsule Connect?

NO.44 In SmartConsole, objects are used to represent physical and virtual network components and also some logical components. These objects are divided into several categories. Which of the following is NOT an objects category?

NO.45 You noticed that CPU cores on the Security Gateway are usually 100% utilized and many packets were dropped. You don’t have a budget to perform a hardware upgrade at this time. To optimize drops you decide to use Priority Queues and fully enable Dynamic Dispatcher. How can you enable them?

NO.46 What SmartEvent component creates events?

NO.47 Which command will allow you to see the interface status?

NO.48 Ken wants to obtain a configuration lock from other administrator on R80 Security Management Server. He can do this via WebUI or via CLI.
Which command should he use in CLI? (Choose the correct answer.)

NO.49 Which statements below are CORRECT regarding Threat Prevention profiles in SmartDashboard?