156-215.70 Check Point Certified Security Administrator Exam Set 5

What is the primary benefit of using upgrade_export over either a backup or snapshot?


Options are :

  • None
  • The backup and snapshot commands can take a long time to run again upgrade_export takes a much shorter time.
  • .upgrade_export is operating system independent and can be used as a backup or snapshot is not available. (Correct)
  • upgrade_export have the opportunity to back up your system and SmartView Tracker logs after the backup and snapshot does not.
  • upgrade_export back up the routing tables hosted files, and manual ARP configurations with backup and snapshot does not.

Answer : .upgrade_export is operating system independent and can be used as a backup or snapshot is not available.

The network connection is experiencing problems and want to check if the routing problem occurs. You will need to disable the firewall process, but still can be routed through the Gateway. What you need to run the command after you stop the firewall service?


Options are :

  • clearing the path .ipsofwd
  • FW fwd routing
  • ipsofwd is admin (Correct)
  • FW trucks are routed
  • None

Answer : ipsofwd is admin

Which of the following statements most accurately reflects a snapshot of command?


Options are :

  • Ports snapshot contains configuration settings and information about the product Check Point Remote Security Management Server.
  • Snapshot creates a full OS-level backup, such as network interface connection information, Check Point's product information and settings in the update is a Secure Platform Security Gateway. (Correct)
  • creates a snapshot of the entire system-level backup of Security Management Server on any operating system.
  • Snapshot saves only the system settings for the Gateway.
  • None

Answer : Snapshot creates a full OS-level backup, such as network interface connection information, Check Point's product information and settings in the update is a Secure Platform Security Gateway.

Prior to updating the Secure Platform, create a backup. To save time, many administrators backup command. This creates a backup copy of Checkpoint, as well as the configuration of the system configuration. An administrator has installed the latest HFA system after creating a backup. It is a mistake very complex static routing. Check Point's configuration has not changed. The system administrator uses to restore correct errors in the static routing?


Options are :

  • The recovery process can be easily return the command to select the appropriate backup.
  • The backup can not be restored because the binary files are missing.
  • None
  • Restore Point by selecting Snapshot Management Platform Secure boot menu.
  • The return process is not possible, because the backup does not have the same build number (version). (Correct)

Answer : The return process is not possible, because the backup does not have the same build number (version).

Which operating systems are supported by Check Point Security Gateway server open?


Options are :

  • Sun Solaris, Red Hat Enterprise Linux, Check Point Secure Platform, IPSO, Microsoft Windows
  • Check Point Secure Platform, IPSO, Sun Solaris, Microsoft Windows
  • Check Point Secure Platform and Microsoft Windows (Correct)
  • None
  • Microsoft Windows, Red Hat Enterprise Linux, Sun Solaris, IPSO

Answer : Check Point Secure Platform and Microsoft Windows

Match each of the following commands is functioning properly. Each command has one function only on the list.


Options are :

  • C1> F6; C2> F4; C3> F2; C4> F5 (Correct)
  • C1> F2; C2> F1; C3> F6; C4> F4
  • None
  • C1> F2; C2> F4; C3> F1; C4> F5
  • C1> F4; C2> F6; C3> F3; C4> F2

Answer : C1> F6; C2> F4; C3> F2; C4> F5

156-315.13 Check Point Security Expert R76(GAiA) Exam Set 6

If you run the FW follow without any parameters, which does not display the print mechanism?


Options are :

  • .in /tmp/log/monitor.out
  • console (Correct)
  • in /var/log/monitor.out
  • None
  • in /var/adm/monitor.out

Answer : console

Where is IPSO Boot Manager are located physically IP Appliance?


Options are :

  • On the internal Compact Flash memory (Correct)
  • On stage, the BIOS
  • In the NVRAM / directory
  • None
  • external JumpDrive

Answer : On the internal Compact Flash memory

You need to back up your routing, interface, and DNS configuration information for the Secure Platform R70 Security Gateway. Every backup and recovery solution do you use?


Options are :

  • Database version control system
  • Secure Platform Backup Tools (Correct)
  • None
  • Manual copies FWDIR $ / conf
  • upgrade_export and upgrade_import commands

Answer : Secure Platform Backup Tools

The sample provides a backup Secure Platform. The result may be stored in a file server or a local file in / var / CPsnapshot / photos. How to restore a local snapshot named MySnapshot.tgz?


Options are :

  • The expert user, type the command snapshot -r MySnapshot.tgz.
  • None
  • The expert user, type the command snapshot - R to restore a local file. Then give the correct file name.
  • The expert user, type the command to return to --file MySnapshot.tgz. (Correct)
  • Restart the system and call in the Start menu. Select the option Snapshot Management, provides expert password and click [L] to return the local file. Then give the correct file name.

Answer : The expert user, type the command to return to --file MySnapshot.tgz.

You have Security Administrator MegaCorp. Check Point firewall is installed and enabled is a Secure Platform. You have trouble configuring speed and duplex settings Ethernet. What can configure the speed and duplex settings for the Ethernet interface of the following commands, and will survive a reboot? Give the best answer.


Options are :

  • eth_set (Correct)
  • ethtool
  • ifconfig -a
  • mii_tool
  • None

Answer : eth_set

Which of the following tools are used to produce a Security Gateway R70 Composition of the report?


Options are :

  • ethereal
  • None
  • InfoView
  • cpinfo (Correct)
  • licview

Answer : cpinfo

156-215.77 Check Point Certified Security Administrator Exam Set 5

You are going to MegaCorp new security system. The company still has some of the older dual core servers that should be used to re-new firewall solution for branch offices. What Checkpoint features should you take to install and to achieve high security and high performance branch offices?


Options are :

  • IPS and CoreXL together (Correct)
  • Just like the IPS CoreXL undermine the performance over dual core system
  • None
  • Not CoreXL and IPS because this is the only office and needs less security
  • Just as IPS CoreXL nut does not run only dual-core processors

Answer : IPS and CoreXL together

When restoring R70 upgrade_import you use the command, which of the following items can not be returned?


Options are :

  • SIC Certificates
  • None
  • Global properties
  • licenses
  • their route (Correct)

Answer : their route

Another administrator accidentally installed the wrong security firewall. Having done this, you're both locked out of the firewall, which is called "myfw1". What command would you implement the system console "myfw1", so that you can raise any new security policy?


Options are :

  • None
  • cpstop
  • FW unloadlocal (Correct)
  • fw ctl filter
  • FW dbloadlocal

Answer : FW unloadlocal

How can I check the version of the policy locally installed firewall?


Options are :

  • fw ver -k
  • None
  • FW stat (Correct)
  • FW ctl iflist
  • FW ver

Answer : FW stat

Every command to the IP forwarding IPSO?


Options are :

  • echo 1> / proc / sys / net / IPv4 / ip_forward
  • echo 0> / proc / sys / net / ipv4 / ip_forward
  • Clish -C active set of routing means
  • None
  • ipsofwd is admin (Correct)

Answer : ipsofwd is admin

You are going to upgrade to Check Point Gateway between R65 and R70. Before the upgrade, you want to backup Gateway should not be any problems with the update. Which of the following enables the configuration of the Gateway fully backed up to a manageable size of the least amount of time?


Options are :

  • upgrade_export
  • Checking the database
  • None
  • back up (Correct)
  • picture

Answer : back up

Check Point Certified Security Expert Exam Set 10

Suppose Security Gateway hard drive fails and you are forced to repair them. You Snapshot file stored in the TFTP server, backups, and Security Management Server. What is the correct procedure for rebuilding Gateway quickly?


Options are :

  • Installed on a base operating system (i.e., secure platform). Specifies the gateway interface so that the gateway can communicate with the TFTP server. Install all necessary Check Point's products and previously applied patches. Restore the saved snapshot of the image, and then install Policy.
  • Run the revert command to restore the snapshot, create and install the SIC Policy.
  • Run the revert command to restore the snapshot. Install all necessary Check Point products. Create the SIC and install Policy.
  • None
  • Installed on a base operating system (i.e., secure platform). Specifies the gateway interface so that the gateway can communicate with the TFTP server. Restore the saved snapshot of the image, and then install security policy. (Correct)

Answer : Installed on a base operating system (i.e., secure platform). Specifies the gateway interface so that the gateway can communicate with the TFTP server. Restore the saved snapshot of the image, and then install security policy.

Which of the following commands to identify whether the installed Security Policy or Security Gateway acts as the original policy?


Options are :

  • cp stat
  • FW stat (Correct)
  • None
  • FW monitor
  • FW ctl Pstat

Answer : FW stat

Wear command removes the security policy directly to the Security Gateway?


Options are :

  • None
  • cpstop
  • .fwm load NULL
  • FW unloadlocal (Correct)
  • FWM unload.local

Answer : FW unloadlocal

Every command line interface utility allows you to check your system administrator name and time stamp of the installed firewall security module?


Options are :

  • FW ctl Pstat
  • None
  • FW stat (Correct)
  • cpstat fwd
  • FW ver

Answer : FW stat

Primary Security Management Server acts as the Secure Platform. What is the easiest way to backup your Security Gateway R70 configuration, including routing and network configuration files?


Options are :

  • Using the command upgrade_export
  • Run pre_upgrade_verifier and save .tgz file / temp directory.
  • None
  • By copying FWDIR $ / conf and $ FWDIR / lib directory to another location.
  • Secure Platform using the native backup utility from the command line or Web-based user interface. (Correct)

Answer : Secure Platform using the native backup utility from the command line or Web-based user interface.

Which of the following statements most accurately reflects upgrade_export command?


Options are :

  • Used when updating the security gateway, upgrade_export contains the modified files, such as is / lib directory and the / conf.
  • None
  • Used primarily in updating the Security Management Server, upgrade_export save all object databases and directories conf import of a newer version of Security Gateway. (Correct)
  • upgrade_export used to update the security gateway, and allows for certain files may be included or excluded prior to export.
  • upgrade_export stored in the network configuration data, objects, global capabilities, and database patches before upgrading Security Management Server.

Answer : Used primarily in updating the Security Management Server, upgrade_export save all object databases and directories conf import of a newer version of Security Gateway.

156-315.71 Check Point Security Expert R71 Practical Exam Set 2

Where you find a Check Point's MIB file?


Options are :

  • $ CPDIR / lib / chkpt.mib (Correct)
  • $ FWDIR / conf / snmp.mib
  • None
  • There is no specific MIB file to Check Point's products
  • It can be obtained only at the request of the TAC.

Answer : $ CPDIR / lib / chkpt.mib

Amy is not sure that his nightly backup to configure Checkpoint backup tool works. If he logged his Gateway to use SSH, which directory would he find her nightly backups?


Options are :

  • / Backups
  • / Opt / backups
  • None
  • / Var / CPbackup / backups (Correct)
  • / Var / backups

Answer : / Var / CPbackup / backups

You have to design the company's new security system. The company needs a very high level of security and also high performance and high throughput in their applications. You must connect the most integrated IPS inspection while maintaining high throughput. What would be the best solution in this situation?


Options are :

  • IPS is not executed when CoreXL is enabled.
  • You need to buy a strong multi-core machine and run R70 or later with Secure Platform CoreXL technology in use. (Correct)
  • Bad luck, both of them together can not be achieved.
  • None
  • IPS system does not affect the performance of the firewall and CoreXL not needed in this scenario.

Answer : You need to buy a strong multi-core machine and run R70 or later with Secure Platform CoreXL technology in use.

How to wear on the flash storage device to mitigate the diskless device platforms?


Options are :

  • RAM drive to reduce swap file "thrashing", which causes rapid wear of the device. (Correct)
  • Issue FW-1 to set up the packet structure is a Security Management Server, dynamically loading when the firewall is started.
  • PRAM flash devices are used, eliminating the longevity
  • None
  • External PCMCIA flash-based extension of the paging file is mapped to it, allowing easy replacement.

Answer : RAM drive to reduce swap file "thrashing", which causes rapid wear of the device.

How can you check whether IP forwarding is enabled IP Security Appliance?


Options are :

  • ipsofwd list (Correct)
  • None
  • Clish -C displays the active routing means
  • cat / proc / sys / net / IPv4 / ip_forward
  • echo 1> / proc / sys / net / IPv4 / ip_forward

Answer : ipsofwd list

There are R70 Security Gateway is a Secure Platform. In the case of a hardware failure, you are the server with the exact same hardware and version of the firewall. What backup method could be used to quickly put on the production of a secondary firewall?


Options are :

  • Manual Backup
  • upgrade_export
  • picture (Correct)
  • None
  • back up

Answer : picture

156-315.77 Check Point Certified Security Specialist Exam Set 6

Comment / Suggestion Section
Point our Mistakes and Post Your Suggestions

Subscribe to See Videos

Subscribe to my Youtube channel for new videos : Subscribe Now