Check Point Threat Prevention

1.

What is the name of Check Point collaborative network that delivers real-time dynamic security intelligence to Check Point threat prevention blades?

ThreatSpect ThreatWiki ThreatCloud ThreatEmulator

2.

What is the main purpose of the ThreatCloud?

It is used in conjunction with IPS. This is the place where ThreatWiki fetches the actual information. It feeds security gateway software blades (i.e. Anti-Virus and Anti-Bot) with real-time security intelligence. It is a database used by SANS institute (formerly known as StormCenter).

3.

Which of the following is information uploaded to ThreatCloud?

Compromised Machine IP Addresses Malware Site IP Addresses Anticipated Attack Methods Sensitive Corporate Data

4.

Which of the following is information shared via ThreatCloud?

Sensitive Corporate Data Bot and virus signatures Anticipated Attack Methods Compromised Machine IP Addresses

5.

Sensitive corporate data is uploaded to ThreatCloud:

When the administrator manually sends suspected traffic to ThreatCloud for inspection. Never When the administrator configures the sensor to be a SensorNET participant. After the bot attack has been confirmed.

6.

What is the name of the Check Point cloud-driven Knowledgebase?

ThreatSpect ThreatCloud ThreatWiki ThreatEmulator

7.

What filters can be used in Check Point ThreatWiki (either via ThreatWiki.checkpoint.com or via ThreatPrevention tab in Dashboard)?

Malware Name, Malware Type Categories, Risk, Release Date Risk, Malware Type, Release Date Categories, Tags, Risk

8.

IPS is primarily a __________-based engine.

Signature Difference Action Anomaly

9.

SmartEvent has several components that work together to help track down security threats. What is the function of the Correlation Unit as one of those components in the architecture? The Correlation Unit:

connects with the SmartEvent Client when generating reports. analyzes each log entry as it enters a log server, according to the Event Policy; when a threat pattern is identified, an event is forwarded to the SmartEventServer. collects syslog data from third party devices and saves them to the database. correlates all the identified threats with the consolidation policy.

10.

In SmartViewTracker, you see a log record of type "control" and severity "critical" for the product "Threat Emulation" which says: "cloud emulation failed. Reason: failed to authenticate gateway..." What is likely to be the reason for this failure?

The user provided the wrong credentials to the gateway The gateway should be configured in a way that Threat Emulation can be done locally in case the cloud is not accessible The cloud is not accessible right now Verify the gateway license / contract

Check Point Threat Prevention

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

COMPANY

Products

OTHERS

Partner

Check Point Threat Prevention

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

Detail Form

COMPANY

Products

OTHERS

Partner