156-315.77 Check Point Certified Security Specialist Exam Set 6

Each protected mode IPS does Nonet exist?


Options are :

  • stand-by
  • allow
  • Detect
  • None
  • prevent

Answer : allow

156-315.77 Check Point Certified Security Specialist Exam Set 7

Each security server can perform security tasks content, but can Nonet perform authentication tasks?


Options are :

  • HTTP
  • SMTP
  • FTP
  • None
  • Remote Login

Answer : SMTP

Which of the following explanation of the role of isolation?


Options are :

  • None
  • Administrators have different leader than intelligent workflow capabilities.
  • Different tasks are decomposed SmartDashboard firewall administrator privileges
  • Before making the commitment, change the administrator session made intelligent workflow management must have the ability to certification.
  • Intelligent workflows can in this way, managers can view only the assigned session to configure

Answer : Before making the commitment, change the administrator session made intelligent workflow management must have the ability to certification.

How can ClusterXL unicast mode to handle the new traffic?


Options are :

  • All packets received pivotally machine and means to determine which packets should be processed through an algorithm and
  • All members receive all of the packages. Security management server to determine which members handle packages. Other members of the package is removed from memory.
  • Process all members and members of all the packages in the cluster synchronized with each other. Pivot is responsible for synchronizing your home directory
  • None
  • Fluoroscopy device to receive and review all new package, and then synchronize contacts with other members

Answer : All packets received pivotally machine and means to determine which packets should be processed through an algorithm and

156-515.65 Check Point Certified Security Expert Plus Exam Set 1

How standby mode when active SmartCenter SmartCenter server failover server to receive all the security gateway logs?


Options are :

  • Secondary server's host name and IP address must be added to the master file, a remote gateway.
  • Create a host object checkpoint to indicate standby SmartCenter server. Then select the log server "on the list" secondary SmartCenter Server "screen and general properties of Check Point products.
  • To set the primary and secondary Servers.The secondary server then logs the gateway may receive, when the active server fails secure communication between the interior (SIC) through.
  • Remote Gateway founded SIC secondary SmartCenter server for logging.
  • Select a log server screen (displayed from the general nature of tree logs and master gateway object), additional log server, secondary SmartCenter Server object. Installation security.

Answer : Select a log server screen (displayed from the general nature of tree logs and master gateway object), additional log server, secondary SmartCenter Server object. Installation security.

Mark options for data loss prevention in the R71.


Options are :

  • Dedicated DLP gateway only DLP Software Blade running.
  • None
  • Firewall Software Blade running on DLP Gateway
  • Running on the same machine on DLP gateway management server
  • Can be deployed unified DLP Software Blade is Check Point's security gateway software blades including firewall, IPS, and management.

Answer : Dedicated DLP gateway only DLP Software Blade running.

You can change the default port management portal:


Options are :

  • Edited master. The portal server conf file.
  • Formatting SIC
  • None
  • Change management interface and run SYSCONFIG
  • Edit the file cp_httpd_admin CONF.

Answer : Change management interface and run SYSCONFIG

156-515.65 Check Point Certified Security Expert Plus Exam Set 2

Each name resolution protocol support SSL VPN?


Options are :

  • DNS, host
  • DNS, host, Imhosts
  • None
  • DNS, host, Imhosts, WINS
  • DNS, host, WINS

Answer : DNS, host

When the security administrator QoS bandwidth adjustment measurement (BPS, kbps or BPS) units checkpoint?


Options are :

  • None
  • Check Point Gateway object properties
  • QoS class objects
  • $ CPDIR / conf directory / qos_props.pf
  • Global functions

Answer : Global functions

Users can Nonet verify the SSL VPN. Authenticated user is assigned a user group, and reproduce the problem, it confirmed the failure of the session. You do Nonet see proof of this company's business processes logs. Users do Nonet use client certificates login.To debug the errors in the certification process may be the way to solve?


Options are :

  • cvpnd
  • cpauth
  • None
  • By Administrator
  • Apache

Answer : cvpnd

Check Point Certified Security Administrator Set 1

If the smart update distribution fails to update or security platform, the system how to restore?


Options are :

  • None
  • The administrator must install the latest version cprinstall command recovery.
  • Administrators can only return to the picture (if any) created before the command cprinstall snapshot.
  • The administrator must manually delete the RPM package, and try the update again.
  • Secure platform will automatically restart a snapshot of the last version of return of before upgrading.

Answer : Secure platform will automatically restart a snapshot of the last version of return of before upgrading.

Check Point Certified Security Administrator Set 2

You're using the Intelligent Updater to get the data, and execute the following statement is false improved remote NGX security Gateway.Which?


Options are :

  • Smart Update can check Intelligence Center and about 1 VPN gateway product information
  • If SmartDashboard is open and download the update package, the update will fail.
  • Smart Update can be run locally requirements of VPN-1 gateway License Information
  • None
  • NG is Nonet remotely on the SVN Foundation package of intelligent application security gateway for remote installation

Answer : NG is Nonet remotely on the SVN Foundation package of intelligent application security gateway for remote installation

Which of the following office mode support?


Options are :

  • Data transmission mode
  • None
  • Security Client
  • Security wealt
  • SSL Network Extender

Answer : Security wealt

What is the size of a little bit of DES?


Options are :

  • 64
  • 168
  • 112
  • 56
  • 128
  • 32

Answer : 56

Check Point Certified Security Administrator Set 3

Network traffic requirements, in addition to the quality of network service modules from other routers, special treatment of Check Point QoS features should be used?


Options are :

  • Weighted Fair Queuing
  • limit
  • guarantee
  • Differentiated Service
  • A slight delay waiting

Answer : Differentiated Service

Which of the following conditions SSL Network Extender server is correct? Select all eligible.


Options are :

  • Use completeness Client Security (ICS), you must install the ICS server or configuration tool.
  • Specific VPN-1 security gateway must be set to the remote access VPN-1 member of the community.
  • VPN1 gateway must be configured to work with guest mode
  • There is an obvious need for rules to protect access to the client's SSL Network Extender user to user.

Answer : Use completeness Client Security (ICS), you must install the ICS server or configuration tool. Specific VPN-1 security gateway must be set to the remote access VPN-1 member of the community. VPN1 gateway must be configured to work with guest mode

What is the basis of communication between functional modules ClusterXL checkpoint Check Point your agreement?


Options are :

  • CCP
  • RDP
  • Safety
  • HA opcode
  • CKPP

Answer : CCP

Check Point Certified Security Administrator Set 4

To upgrade NG engine via a secure platform VPN-1 NGX R65 SmartUpdate.Which package (S) is (are) Application Intelligence R55 security gateway before it needs to run the database upgrade?


Options are :

  • VPN-1 Power / UTM NGX R65 package
  • Platform Security and VPN-1 Power / UTM NGX R65 package
  • Security Platform NGX R65 packages
  • SVN Foundation and VPN-1 Power / UTM package
  • None

Answer : Security Platform NGX R65 packages

When you synchronize a cluster of the following statements is true? Select all eligible.


Options are :

  • In the case of failover, failure to account information regardless of the Nonermal members can disappear
  • Only cluster members running the same operating system platforms can be synchronized.
  • use. National network of resources to maintain a secure server, so that these electrodes can Nonet be synchronized.
  • For maintenance of a secure server, so that these electrodes can Nonet be synchronized connection of national resources.

Answer : Only cluster members running the same operating system platforms can be synchronized. use. National network of resources to maintain a secure server, so that these electrodes can Nonet be synchronized. For maintenance of a secure server, so that these electrodes can Nonet be synchronized connection of national resources.

What is the biggest benefit is compared to Frame Relay VPN derived from other types of private network of green?


Options are :

  • Lower cost
  • None
  • Stronger authentication
  • Less failure / shutdown
  • Higher performance

Answer : Lower cost

Check Point Certified Security Administrator Set 5

Public key encryption is considered which of the following?


Options are :

  • Two key / asymmetric
  • One of the key / asymmetric
  • None
  • Key / a symmetrical
  • Two key / symmetric

Answer : Two key / asymmetric

If the digital signature is achieved, and verify the integrity and authentication of the sender of data, a digital signature only to perform:


Options are :

  • Asymmetric encryption algorithm
  • CBL-DES
  • Triple DES
  • None
  • Symmetric encryption algorithm

Answer : Asymmetric encryption algorithm

What physical machine must have access to user-centered public IP Smart Update checks for new software package?


Options are :

  • None
  • Smart Update Library Library SQL Server database
  • Smart Update GUI PC
  • Get a new update package VPN-1 security gateways
  • Smart Update installed SmartCenter server PC

Answer : Smart Update GUI PC

Check Point Certified Security Expert Exam Set 1

There license_upgrade security platform tools you can do the following Gateway.Which Update Tool?


Options are :

  • To simulate the license upgrade.
  • View license in SmartUpdate license file.
  • None
  • View the status of installed licenses
  • The actual license to run the update.

Answer : View license in SmartUpdate license file.

What action can Nonet be run flexible update NGX R65?


Options are :

  • None
  • Restart the gateway
  • Pre-installation verification
  • Get all the information gateway
  • Retrieve synchronization status

Answer : Retrieve synchronization status

Virtual Private Network (VPN) access control will include a part of?


Options are :

  • management
  • Introduction
  • service quality
  • None
  • Safety

Answer : Safety

Check Point Certified Security Expert Exam Set 10

What encryption methods provide local encryption?


Options are :

  • None
  • d FLAT
  • rake
  • IKE
  • jump

Answer : jump

Centralized license management allows security administrators to perform which of the following? Select all eligible


Options are :

  • Check the license expires
  • Add or delete license or authorization from the archive
  • Replacement and / or removal of a condition of granting NGX central remote module (Nonen-local license)
  • Sort licenses and permits viewing properties
  • ttach both NGX Central and Local licenses to a remote module
  • NGX .Delete all other central place approval remote module

Answer : Check the license expires Add or delete license or authorization from the archive Replacement and / or removal of a condition of granting NGX central remote module (Nonen-local license) Sort licenses and permits viewing properties

What tools can Nonet trigger the intelligent update NGX R65?


Options are :

  • Secure Web Platform UI
  • image
  • None
  • Nonekia Traveler
  • cpinfo

Answer : image

Check Point Certified Security Expert Exam Set 11

To determine the correct steps to update intelligent update remote security gateway.


Options are :

  • Once you have chosen "package> Sharing ..." and then select the target gateway Smart Update Wizard will guide administrators through a distributed installation.
  • None
  • Once you have chosen "package> Sharing ..." and then select the destination gateway, the selected packet replication package repository Intelligence Center security gateway and the installation is complete.
  • Once you have chosen "package> Sharing ..." and then select the destination gateway, the selected packet connection from the PC CD-ROM and intelligent update directly to the security gateway and copy the installation is complete.
  • Once you have chosen "package> Sharing ..." and then select the destination gateway, the selected packet replication package repository Intelligence Center security gateway, but Nonet installed.

Answer : Once you have chosen "package> Sharing ..." and then select the destination gateway, the selected packet replication package repository Intelligence Center security gateway, but Nonet installed.

Comment / Suggestion Section
Point our Mistakes and Post Your Suggestions