The Firewall Administrator is required to create 100 new host objects with different IP addresses. What API command can he use in the script to achieve the requirement?

add host name <New HostName> ip-address <ip address>

add hostname <New HostName> ip-address <ip address>

set host name <New HostName> ip-address <ip address>

set hostname <New HostName> ip-address <ip address>

Tom has been tasked to install Check Point R81 in a distributed deployment. Before Tom installs the systems this way, how many machines will he need if he does NOT include a SmartConsole machine in his calculations?

One machine, but it needs to be installed using SecurePlatform for compatibility purposes.

When doing a Stand-Alone Installation, you would install the Security Management Server with which other Check Point architecture component?

None, Security Management Server would be installed by itself.

The Correlation Unit performs all but the following actions:

Assigns a severity level to the event.

Marks logs that individually are not events, but may be part of a larger pattern to be identified later.

Generates an event based on the Event policy.

Assigns a severity level to the event.

Takes a new log entry that is part of a group of items that together make up an event, and adds it to an ongoing event.

What is the difference between SSL VPN and IPSec VPN?

IPSec VPN requires installation of a resident VPN client and SSL VPN requires only an installed Browser.

IPSec VPN does not require installation of a resilient VPN client.

SSL VPN requires installation of a resident VPN client.

SSL VPN and IPSec VPN are the same.

IPSec VPN requires installation of a resident VPN client and SSL VPN requires only an installed Browser.

Which of the following will NOT affect acceleration?

Connections destined to or originated from the Security gateway

Connections that have a Handler (ICMP, FTP, H.323, etc.)

The following command is used to verify the CPUSE version:

HostName:0>show installer status build

[Expert@HostName:0]#show installer status

[Expert@HostName:0]#show installer status build

HostName:0>show installer build

What is the difference between an event and a log?

A log entry becomes an event when it matches any rule defined in Event Policy

Events are generated at gateway according to Event Policy

A log entry becomes an event when it matches any rule defined in Event Policy

Events are collected with SmartWorkflow form Trouble Ticket systems

What are the attributes that SecureXL will check after the connection is allowed by Security Policy?

Source address, Destination address, Source port, Destination port, Protocol

Source MAC address, Destination MAC address, Source port, Destination port, Protocol

Source address, Destination address, Source port, Destination port

Source address, Destination address, Destination port, Protocol

Which statement is NOT TRUE about Delta synchronization?

Using UDP Multicast or Broadcast on port 8161

Using UDP Multicast or Broadcast on port 8116

Transfers changes in the Kernel tables between cluster members.

The Event List within the Event tab contains:

a list of options available for running a query.

the top events, destinations, sources, and users of the query results, either as a chart or in a tallied list.

the details of a selected event.

Which statement is correct about the Sticky Decision Function?

It is not supported with either the Performance pack of a hardware based accelerator card

Does not support SPI's when configured for Load Sharing

It is automatically disabled if the Mobile Access Software Blade is enabled on the cluster

It is not required L2TP traffic

Which statement is true regarding redundancy?

Both ClusterXL and VRRP are fully supported by Gaia and available to all Check Point appliances, open servers, and virtualized environments.

System Administrators know when their cluster has failed over and can also see why it failed over by using the cphaprob --f if command.

ClusterXL offers three different Load Sharing solutions: Unicast, Broadcast, and Multicast.

Machines in a ClusterXL High Availability configuration must be synchronized.

Both ClusterXL and VRRP are fully supported by Gaia and available to all Check Point appliances, open servers, and virtualized environments.

In R81, how do you manage your Mobile Access Policy?

From the Dedicated Mobility Tab

Which of the following statements is TRUE about R81 management plug-ins?

A management plug-in interacts with a Security Management Server to provide new features and support for new products.

The plug-in is a package installed on the Security Gateway.

Installing a management plug-in requires a Snapshot, just like any upgrade process.

A management plug-in interacts with a Security Management Server to provide new features and support for new products.

Using a plug-in offers full central management only if special licensing is applied to specific features of the plug-in.

How can SmartView application accessed?

https://<Security Management IP Address>/smartview/

http://<Security Management IP Address>/smartview

http://<Security Management IP Address>:4434/smartview/

https://<Security Management IP Address>/smartview/

https://<Security Management host name>:4434/smartview/

Where you can see and search records of action done by R81 SmartConsole administrators?

In the Logs & Monitor view, select ''Open Audit Log View''

In SmartView Tracker, open active log

In the Logs & Monitor view, select ''Open Audit Log View''

The Firewall kernel is replicated multiple times, therefore:

The Firewall can run the same policy on all cores.

The Firewall kernel only touches the packet if the connection is accelerated

The Firewall can run different policies per core

The Firewall kernel is replicated only with new connections and deletes itself once the connection times out

The Firewall can run the same policy on all cores.

To fully enable Dynamic Dispatcher on a Security Gateway:

run fw ctl multik set_mode 9 in Expert mode and then Reboot.

Using cpconfig, update the Dynamic Dispatcher value to ''full'' under the CoreXL menu.

Edit/proc/interrupts to include multik set_mode 1 at the bottom of the file, save, and reboot.

run fw multik set_mode 1 in Expert mode and then reboot.

Which features are only supported with R81.20 Gateways but not R77.x?

The rule base can be built of layers, each containing a set of the security rules. Layers are inspected in the order in which they are defined, allowing control over the rule base flow and which security functionalities take precedence.

Access Control policy unifies the Firewall, Application Control & URL Filtering, Data Awareness, and Mobile Access Software Blade policies.

Limits the upload and download throughput for streaming media in the company to 1 Gbps.

The rule base can be built of layers, each containing a set of the security rules. Layers are inspected in the order in which they are defined, allowing control over the rule base flow and which security functionalities take precedence.

Time object to a rule to make the rule active only during specified times.

SmartEvent has several components that function together to track security threats. What is the function of the Correlation Unit as a component of this architecture?

Analyzes each log entry as it arrives at the log server according to the Event Policy. When a threat pattern is identified, an event is forwarded to the SmartEvent Server.