Check Point-Certified Security Administrator - GAiA Set 6

Question - 15 Maximum mark : - 27

Home
All Exams
Check Point-Certified Security Administrator - GAiA Online Practice Exams
Check Point-Certified Security Administrator - GAiA Set 6

In SmartDashboard, you configure 45 MB as the required free hard-disk space to accommodate logs. What can you do to keep old log files, when free space falls below 45 MB?

Do nothing. The Security Management Server automatically copies old logs to a backup server before purging. ✘ Use the command fwm logexport to export the old log files to another location. ✘ Configure a script to run fw logswitch and SCP the output file to a separate file server. ✘ Do nothing. Old logs are deleted, until free space is restored. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

How do you configure an alert in SmartView Monitor?

By right-clicking on the Gateway, and selecting Properties. ✘ By choosing the Gateway, and Configure Thresholds. ✘ An alert cannot be configured in SmartView Monitor. ✘ By right-clicking on the Gateway, and selecting System Information. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

True or False? SmartView Monitor can be used to create alerts on a specified Gateway.

False, alerts can only be set in SmartDashboard Global Properties. ✘ True, by choosing the Gateway and selecting System Information. ✘ False, an alert cannot be created for a specified Gateway. ✘ True, by right-clicking on the Gateway and selecting Configure Thresholds. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

You are trying to save a custom log query in R76 SmartView Tracker, but getting the following error: Could not save (Error: Database is Read Only) Which of the following is a likely explanation for this?

You do not have OS write permissions on the local SmartView Tracker PC in order to save the custom query locally. ✘ You do not have the explicit right to save a custom query in your administrator permission profile underSmartConsole customization. ✘ Another administrator is currently connected to the Security Management Server with read/writepermissions which impacts your ability to save custom log queries to the Security Management Server. ✘ You have read-only rights to the Security Management Server database. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

The R76 fw monitor utility is used to troubleshoot which of the following problems?

User data base corruption ✘ Traffic issues ✘ Phase two key negotiation ✘ Log Consolidation Engine ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

You are the Security Administrator for MegaCorp. In order to see how efficient your firewall Rule Base is, you would like to see how often the particular rules match. Where can you see it? Give the BEST answer.

In the SmartView Tracker, if you activate the column Matching Rate. ✘ It is not possible to see it directly. You can open SmartDashboard and select UserDefined in the Trackcolumn. Afterwards, you need to create your own program with an external counter. ✘ In SmartReporter, in the section Firewall Blade - Activity > Network Activity with information concerningTop Matched Logged Rules. ✘ SmartReporter provides this information in the section Firewall Blade - Security > Rule Base Analysiswith information concerning Top Matched Logged Rules. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

A company has disabled logging for some of the most commonly used Policy rules. This was to decrease load on the Security Management Server and to make tracking dropped connections easier. What action would you recommend to get reliable statistics about the network traffic using SmartReporter?

Configure Additional Logging on an additional log server. ✘ Turn the field Track of each rule to LOG. ✘ Network traffic cannot be analyzed when the Security Management Server has a high load. ✘ SmartReporter analyzes all network traffic, logged or not. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

What is a Consolidation Policy?

A global Policy used to share a common enforcement policy for multiple Security Gateways. ✘ The collective name of the logs generated by SmartReporter. ✘ The collective name of the Security Policy, Address Translation, and IPS Policies. ✘ The specific Policy written in SmartDashboard to configure which log data is stored in theSmartReporter database. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

You find a suspicious FTP site trying to connect to one of your internal hosts. How do you block it in real time and verify it is successfully blocked? Highlight the suspicious connection in SmartView Tracker:

Log mode. Block it using Tools > Block Intruder menu. Observe in the Log mode that the suspicious connection does not appear again in this SmartView Tracker view. ✘ Active mode. Block it using Tools > Block Intruder menu. Observe in the Active mode that thesuspicious connection is listed in this SmartView Tracker view as "dropped". ✘ Log mode. Block it using Tools > Block Intruder menu. Observe in the Log mode that the suspiciousconnection is listed in this SmartView Tracker view as "dropped". ✘ Active mode. Block it using Tools > Block Intruder menu. Observe in the Active mode that thesuspicious connection does not appear again in this SmartView Tracker view. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

10.

Your Security Gateways are running near performance capacity and will get upgraded hardware next week. Which of the following would be MOST effective for quickly dropping all connections from a specific attacker's IP at a peak time of day?

Change the Rule Base and install the Policy to all Security Gateways ✘ SAM - Suspicious Activity Rules feature of SmartView Monitor ✘ SAM - Block Intruder feature of SmartView Tracker ✘ Intrusion Detection System (IDS) Policy install ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Prev Next

Congratulations

you have successfully completed the test

Back to Question View Result

Detail Form

We will send your result on your email id and phone no. please fill detail

Name

Email ID Note: Report will be send to the above Email ID

Phone No

Check Point-Certified Security Administrator - GAiA Set 6

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

COMPANY

Products

OTHERS

Partner