156-215.70 Check Point Certified Security Administrator Exam Set 1

What information can be found in the SmartView Tracker Log Management?


Options are :

  • .Administrator SmartDashboard logout event (Correct)
  • Secure Platform expert login event
  • Creation of the system administrator uses cpconfig
  • FTP user authentication error
  • None

Answer : .Administrator SmartDashboard logout event

In SmartDashboard, you can specify the required 45 MB free hard disk space to accommodate logs. What you can do to keep the old log files when free space is below 45 MB?


Options are :

  • Do not do anything. The old logs will be deleted, until free space is restored.
  • Do not do anything. Security Management Server automatically copies the old logs to the backup server before rinsing.
  • Use the FWM logexport command to export the old log files to another location.
  • None
  • Create a script to run the FW logswitch and SCP an output to a separate file server. (Correct)

Answer : Create a script to run the FW logswitch and SCP an output to a separate file server.

To identify the correct Smart Update step is carried out to update the remote security gateway. Once you have selected packages> Share and select target only the gateway:


Options are :

  • Smart Update wizard walks the administrator through a distributed installation.
  • the selected package will be copied Package Archive Server Security Management Security Gateway and the installation is complete.
  • None
  • the selected package is copied to CD-ROM Smart Update PC directly to the Security Gateway and the installation is complete.
  • the selected package will be copied Package Archive Server Security Management Security Gateway but the installation is not performed. (Correct)

Answer : the selected package will be copied Package Archive Server Security Management Security Gateway but the installation is not performed.

You notice a suspicious connection to a problematic host. You decide that you want to block everything that an entire network, not just problematic to the host. To prevent this hour when you investigate further, but you do not want to add any rules in the rule base. How to achieve this?


Options are :

  • Create a rule for suspicious activity SmartView Monitor. (Correct)
  • None
  • using a temporary rule SmartDashboard and select Hide rule.
  • Select Block Intruder SmartView Tracker Tools menu
  • Use DBEdit script by adding a rule directly rule Bases_5_0.fws configuration file.

Answer : Create a rule for suspicious activity SmartView Monitor.

Check Point Certified Security Administrator Set 2

What happens to the evaluation license of the license-update?


Options are :

  • They will expire automatically.
  • They upgraded with new available features.
  • They will not change, but not necessarily activate all the features of the new version. (Correct)
  • They are dropped.
  • None

Answer : They will not change, but not necessarily activate all the features of the new version.

Each regional grocery store chain is protected by the security gateway. Information technology audit department wants to report: the name of security installed on every remote security gateway. Date and Time Security was installed. The general performance statistics (CPU usage, average CPU time, active in real memory, etc.). Which Smart Console application you can use to collect all this information?


Options are :

  • SmartView Tracker
  • SmartDashboard
  • SmartView Monitor (Correct)
  • None
  • Smart Update

Answer : SmartView Monitor

Third Shift Security Administrator and installed a new security policy early this morning. When you arrive, she says, that she has received complaints that the Internet connection is very slow. You suspect that the security gateway virtual memory might be a problem. What Smart Console component you use to check this?


Options are :

  • Eventia Analyzer
  • SmartView Tracker
  • This information can only be viewed FW CTL Pstat CLI command.
  • SmartView Monitor (Correct)
  • None

Answer : SmartView Monitor

True or False: SmartView Monitor can be used to create alerts to a specific Gateway.


Options are :

  • Wrong, alarms can be set SmartDashboard Global Properties.
  • Wrong, the alarm can not create a specific Gateway.
  • True, right-clicking and selecting Configure Gateway thresholds. (Correct)
  • None
  • True, by choosing Gateway, and then click System Information.

Answer : True, right-clicking and selecting Configure Gateway thresholds.

Whose gate is able to walk in the implementation of the points, so that packet logging to work correctly?


Options are :

  • 256
  • None
  • 258
  • 514
  • 257 (Correct)

Answer : 257

SmartView Tracker R70 consists of three different modes. They are:


Options are :

  • .Log, active, and Management
  • Network and Endpoint, active, and Management (Correct)
  • Log, active, and inspection
  • Log, track, and Management
  • None

Answer : Network and Endpoint, active, and Management

156-315.13 Check Point Security Expert R76(GAiA) Exam Set 9

Sally is a Hot Fix pack (HFA) he wants to install his Security Gateway, which acts as the Secure Platform, but he can not SCP HFA system. He can SSH Security Gateway, but he has never been able to scp files to it. What would be the most likely cause he can not do so?


Options are :

  • He needs to edit / etc / sshd / sshd_config and add the account in the normal mode.
  • None
  • He needs to run cpconfig ability to scp files.
  • He needs to edit / etc / scpusers and more normal state of the account. (Correct)
  • He needs to run sysconfig and restart the SSH process

Answer : He needs to edit / etc / scpusers and more normal state of the account.

You have blocked the IP address Block Intruder SmartView Tracker feature. How do you view the blocked addresses?


Options are :

  • In SmartView Monitor, select the rules suspicious activity to the Tools menu and choose the right Security Gateway from the list. (Correct)
  • Run FWM blocked_view.
  • In SmartView Monitor, select Blocked Intruder query option in the tree view.
  • None
  • In the SmartView Tracker, select the active tab, and actively prevent connections to monitors.

Answer : In SmartView Monitor, select the rules suspicious activity to the Tools menu and choose the right Security Gateway from the list.

What is the command to update the Secure Platform NG with Application Intelligence R55 R70 Management Server?


Options are :

  • add patch CD (Correct)
  • FW install_mgmt
  • None
  • upgrade_mgmt
  • FWM upgrade_tool

Answer : add patch CD

What steps can be carried out Smart Update R70?


Options are :

  • cpinfo (Correct)
  • None
  • remote_uninstall_verifier
  • upgrade_export
  • FW stat -l

Answer : cpinfo

There are license_upgrade Tool Platform Secure Gateway. Which of the following do you update tool?


Options are :

  • View licenses in the SmartUpdate License archive (Correct)
  • The actual license upgrade
  • View the status of installed licenses
  • None
  • To simulate the license upgrade

Answer : View licenses in the SmartUpdate License archive

You have Security Administrator MegaCorp. In order to see how effective the firewall rule base is, you want to see how often have special rules match. How do you see it? Give the best answer.


Options are :

  • None
  • Smart Reporter information in paragraph Firewall Blade - Security> rule base analysis information Top Logged hitting the rules. (Correct)
  • In the SmartView Tracker, if you activate the corresponding column Price
  • It is not possible to see directly. You can open SmartDashboard and select UserDefined Track column. Afterward, you must create an external counter of your program.
  • In the Smart Reporter, in paragraph Firewall Blade - Operation> Information regarding the network activity hitting the Top Logged rules.

Answer : Smart Reporter information in paragraph Firewall Blade - Security> rule base analysis information Top Logged hitting the rules.

156-315.77 Check Point Certified Security Expert Exam Set 22

To define an e-mail alert whenever a policy is installed to a specific Gateway. Where would you set this alarm?


Options are :

  • You can not create an email alert for Policy installation.
  • In SmartView Monitor, select Gateway> Set the threshold values.
  • In SmartView Monitor, select Gateway> Configure thresholds and SmartDashboard select Global Properties> Alarms. (Correct)
  • None
  • In SmartDashboard Select Global Properties> Alarms.

Answer : In SmartView Monitor, select Gateway> Configure thresholds and SmartDashboard select Global Properties> Alarms.

How do you use the SmartView Monitor to collect traffic statistics of your company's Internet activity during production hours?


Options are :

  • Use the Traffic Counters SmartView Monitor settings and create a diagram in which the entire HTTP traffic day. (Correct)
  • None
  • Define a suspicious Activity rule which triggers an alarm when the HTTP traffic passes through the gateway.
  • View the full packets through the security gateway.
  • Select the tunnels to view and create statistics report.

Answer : Use the Traffic Counters SmartView Monitor settings and create a diagram in which the entire HTTP traffic day.

You have Security Administrator large call center. The Executive Committee is concerned that employees can be installed and try to use peer-to-peer file-sharing utilities, during the lunch break. Call Centera s internal network is protected by security gateway, set to drop a peer to peer file sharing traffic. Which option do you use to determine the number of packets dropped for each Gateway?


Options are :

  • SmartDashboard
  • SmartView status
  • None
  • SmartView Monitor (Correct)
  • SmartView Tracker

Answer : SmartView Monitor

Which of the following can be found cpinfo from the implementation point?


Options are :

  • The complete file objects_5_0.c
  • Policy files for information specific to the point of control (Correct)
  • Everything was not included in the file r2info
  • VPN key to all established connections to all points of implementation
  • None

Answer : Policy files for information specific to the point of control

What is characteristic of R70 permits to block certain IP addresses within a certain period of time?


Options are :

  • Suspicious Activity Monitoring (Correct)
  • Block Port Overflow
  • Local interface Scam
  • HTTP methods
  • None

Answer : Suspicious Activity Monitoring

Which directory you pre-install the R70 upgrade the verifier is a Secure Platform Security Management Server?


Options are :

  • In FWDIR $ / conf.
  • It does not matter, because the dynamic information entered by the Administrator must seek the correct configurations. (Correct)
  • None
  • It does not matter, as long as the administrator to use chmod allow the file to execute.
  • In FWDIR $ / bin.

Answer : It does not matter, because the dynamic information entered by the Administrator must seek the correct configurations.

156-515.65 Check Point Certified Security Expert Plus Exam Set 1

Why upgrade_export configuration file (.tgz) will be deleted when you have made the import process?


Options are :

  • None
  • It prevents subsequent upgrade_export as .tgz files can not be overwritten.
  • It contains its own security configuration, which could be exploited. (Correct)
  • It is inconsistent for any future updates to Smart Update.
  • Smart Update to start a new installation, if the machine is restarted.

Answer : It contains its own security configuration, which could be exploited.

Every tool can not start Smart Update R70?


Options are :

  • None
  • cpinfo
  • IP Appliance Voyager
  • picture (Correct)
  • Secure Platform WebUI

Answer : picture

In SmartView Tracker, a rule which indicates when a packet is dropped due to anti-spoofing?


Options are :

  • Cleanup rule
  • rule 0 (Correct)
  • rule 1
  • An empty field Number of the Rules of Procedure
  • None

Answer : rule 0

Which of these components does not require a Security Gateway R70 license?


Options are :

  • Check Point Gateway
  • Security Management Server
  • None
  • Smart Update upgrade / patch
  • Smart Console (Correct)

Answer : Smart Console

You install your own R70 Security Gateway. Which is not a viable option for the hardware platform?


Options are :

  • Solaris (Correct)
  • Windows
  • IPSO
  • cross beam
  • None

Answer : Solaris

R70 What would you use the GUI to see the number of packets to accept the policy of the previous install?


Options are :

  • SmartView Tracker
  • SmartView status
  • SmartDashboard
  • .SmartView Monitor (Correct)
  • None

Answer : .SmartView Monitor

156-315.13 Check Point Security Expert R76(GAiA) Exam Set 5

Where the use of popup alerts IPS settings that are detected suspicious activity?


Options are :

  • In SmartView Monitor, select Tools> Alarms (Correct)
  • .In SmartDashboard, edit the Gateway object and select IPS> Alarms
  • In SmartDashboard Select Global Properties> Log and Alert> Alert commands
  • In the SmartView Tracker, select Tools> commands
  • None

Answer : In SmartView Monitor, select Tools> Alarms

One of the licenses is set to an IP address is no longer in use. What happens during this license is a license-update?


Options are :

  • It remains untouched (Correct)
  • .It is dropped.
  • It has been upgraded with new available features, but the IP remains the same.
  • None
  • .It is upgrade to the previous features by using the new IP address.

Answer : It remains untouched

Comment / Suggestion Section
Point our Mistakes and Post Your Suggestions