Check Point Certified Security Administrator

1.

How is wear on the flash storage device mitigated on appliance diskless platforms?

A RAM drive reduces the swap file thrashing which causes fast wear on the device. The external PCMCIA-based flash extension has the swap file mapped to it, allowing easy replacement. Issue FW-1 bases its package structure on the Security Management Server, dynamically loading whenthe firewall is booted. PRAM flash devices are used, eliminating the longevity.

2.

In previous versions, the full TCP three-way handshake was sent to the firewall kernel for inspection. How is this improved in the current version of IPSO Flows/SecureXL?

Only the initial SYN packet is inspected. The rest are handled by IPSO. Packets are offloaded to a third-party hardware card for near-line inspection. Packets are virtualized to a RAM drive-based FW VM. Resources are proactively assigned using predictive algorithmic techniques.

3.

Select the correct statement about Secure Internal Communications (SIC) Certificates. SIC Certificates:

Increase network security by securing administrative communication with a two-factor challenge response authentication. Uniquely identify machines installed with Check Point software only. They have the same function asRSA Authentication Certificates. Are for Security Gateways created during the Security Management Server installation. Can be used for securing internal network communications between the Security Gateway and anOPSEC device.

4.

Which of the following statements regarding SecureXL and CoreXL is TRUE?

SecureXL is an application for accelerating connections. CoreXL enables multi-core processing for program interfaces. SecureXL is only available in R75. CoreXL is included in SecureXL.

5.

Beginning with R75, Software Blades were introduced. One of the Software Blades is the IPS Software Blade as a replacement for SmartDefense. When buying or upgrading to a bundle, some blades are included, e.g. FW, VPN, IPS in SG103. Which statement is NOT true?

The license price includes IPS Updates for the first year. The IPS Software Blade can be used for an unlimited time. There is no need to renew the service contract after one year. After one year, it is mandatory to renew the service contract for the IPS Software Blade because it hasbeen bundled with the license when purchased.

6.

John is the Security Administrator in his company. He needs to maintain the highest level of security on the firewalls he manages. He is using Check Point R75. Does he need the IPS Software Blade for achieving this goal?

No, all IPS protections are active, but can't be uploaded without the license like SmartDefense. Yes, otherwise no protections can be enabled. Yes, otherwise the firewall will pass all traffic unfiltered and unchecked. No, the Gateway will always be protected and the IPS checks can't be managed without a license.

7.

Which command allows you to view the contents of an R75 table?

fw tab -x fw tab -a fw tab -s fw tab -t

8.

You need to back up the routing, interface, and DNS configuration information from your R75 SecurePlatform Security Gateway. Which backup-and-restore solution do you use?

SecurePlatform backup utilities upgrade_export and upgrade_import commands Database Revision Control Manual copies of the $FWDIR/conf directory

9.

Your R75 primary Security Management Server is installed on SecurePlatform. You plan to schedule the Security Management Server to run fw logswitch automatically every 48 hours. How do you create this schedule?

Create a time object, and add 48 hours as the interval. Open the primary Security Management Server
objects Logs and Masters window, enable Schedule log switch, and select the Time object. Create a time object, and add 48 hours as the interval. Open the Security Gateway objects Logs andMasters window, enable Schedule log switch, and select the Time object.

Create a time object, and add 48 hours as the interval. Select that time objects Global Properties >Logs and Masters window, to schedule a logswitch.

On a SecurePlatform Security Management Server, this can only be accomplished by configuring the fwlogswitch command via the cron utility.

10.

Which of the following commands can provide the most complete restoration of an R75 configuration?

Cpconfig Upgrade_import fwm dbimport -p cpinfo -recover

Check Point Certified Security Administrator

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

COMPANY

Products

OTHERS

Partner

Check Point Certified Security Administrator

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

Detail Form

COMPANY

Products

OTHERS

Partner