Check Point Certified Security Expert - R80 Questions and
Answers Solved Correctly;2023 update
Identify the API that is not supported by Check Point currently.
A. R80 Management API
B. Identity Awareness Web Services API
C. Open REST API
D. OPSEC SDK
C
SandBlast Mobile identifies threats in mobile devices by using on-device,
network, and cloudbased algorithms and has four dedicated components that
constantly work together to protect
mobile devices and their data. Which component is NOT part of the SandBlast
Mobile solution?
A. Management Dashboard
B. Gateway
C. Personal User Storage
D. Behavior Risk Engine
C
What are the different command sources that allow you to communicate with the
API server?
A. SmartView Monitor, API_cli Tool, Gaia CLI, Web Services
B. SmartConsole GUI Console, mgmt._cli Tool, Gaia CLI, Web Services
C. SmartConsole GUI Console, API_cli Tool, Gaia CLI, Web Services
D. API_cli Tool, Gaia CLI, Web Services
B
What makes Anti-Bot unique compared to other Threat Prevention mechanisms,
such as URL
Filtering, Anti-Virus, IPS, and Threat Emulation?
A. Anti-Bot is the only countermeasure against unknown malware
B. Anti-Bot is the only protection mechanism which starts a counter-attack
against known Command
& Control Centers
C. Anti-Bot is the only signature-based method of malware protection.
D. Anti-Bot is a post-infection malware protection to prevent a host from
establishing a connection to
a Command & Control Center.
D
Which TCP-port does CPM process listen to?
A. 18191
,B. 18190
C. 8983
D. 19009
D
Which method below is NOT one of the ways to communicate using the
Management API's?
A. Typing API commands using the "mgmt_cli" command
B. Typing API commands from a dialog box inside the SmartConsole GUI
application
C. Typing API commands using Gaia's secure shell(clish)19+
D. Sending API commands over an http connection using web-services
D
Your manager asked you to check the status of SecureXL, and its enable
templates and features,
what command will you use to provide such information to manager?
A. fw accel stat
B. fwaccel stat
C. fw acces stats
D. fwaccel stats
B
SSL Network Extender (SNX) is a thin SSL VPN on-demand client that is installed
on the remote
user's machine via the web browser. What are the two modes of SNX?
A. Application and Client Service
B. Network and Application
C. Network and Layers
D. Virtual Adapter and Mobile App
B
Which command would disable a Cluster Member permanently?
A. clusterXL_admin down
B. cphaprob_admin down
C. clusterXL_admin down-p
D. set clusterXL down-p
C
Which two of these Check Point Protocols are used by SmartEvent Processes?
A. ELA and CPD
B. FWD and LEA
C. FWD and CPLOG
D. ELA and CPLOG
D
,Fill in the blank: The tool ________ generates a R80 Security Gateway
configuration report.
A. infoCP
B. infoview
C. cpinfo
D. fw cpinfo
C
Which of these statements describes the Check Point ThreatCloud?
A. Blocks or limits usage of web applications
B. Prevents or controls access to web sites based on category
C. Prevents Cloud vulnerability exploits
D. A worldwide collaborative security network
D
Automatic affinity means that if SecureXL is running, the affinity for each
interface is automatically
reset every
A. 15 sec
B. 60 sec
C. 5 sec
D. 30 sec
B
Which command will allow you to see the interface status?
A. cphaprob interface
B. cphaprob -I interface
C. cphaprob -a if
D. cphaprob stat
C
Which command can you use to enable or disable multi-queue per interface?
A. cpmq set
B. Cpmqueue set
C. Cpmq config
D. St cpmq enable
A
To help SmartEvent determine whether events originated internally you must
define using the
Initial Settings under General Settings in the Policy Tab. How many options are
available to
calculate the traffic direction?
A. 5 Network; Host; Objects; Services; API
B. 3 Incoming; Outgoing; Network
, C. 2 Internal; External
D. 4 Incoming; Outgoing; Internal; Other
D
There are 4 ways to use the Management API for creating host object with R80
Management API.
Which one is NOT correct?
A. Using Web Services
B. Using Mgmt_cli tool
C. Using CLISH
D. Using SmartConsole GUI console
E. Events are collected with SmartWorkflow from Trouble Ticket systems
E
CoreXL is supported when one of the following features is enabled:
A. Route-based VPN
B. IPS
C. IPv6
D. Overlapping NAT
B
You noticed that CPU cores on the Security Gateway are usually 100% utilized
and many packets
were dropped. You don't have a budget to perform a hardware upgrade at this
time. To optimize
drops you decide to use Priorities Queues and fully enable Dynamic Dispatcher.
How can you
enable them?
A. fw ctl multik dynamic_dispatching on
B. fw ctl multik dynamic_dispatching set_mode 9
C. fw ctl multik set_mode 9
D. fw ctl multik pq enable
A
Check Point Management (cpm) is the main management process in that it
provides the
architecture for a consolidates management console. CPM allows the GUI client
and management
server to communicate via web services using ___________.
A. TCP port 19009
B. TCP Port 18190
C. TCP Port 18191
D. TCP Port 18209
A
Which command is used to set the CCP protocol to Multicast?
Answers Solved Correctly;2023 update
Identify the API that is not supported by Check Point currently.
A. R80 Management API
B. Identity Awareness Web Services API
C. Open REST API
D. OPSEC SDK
C
SandBlast Mobile identifies threats in mobile devices by using on-device,
network, and cloudbased algorithms and has four dedicated components that
constantly work together to protect
mobile devices and their data. Which component is NOT part of the SandBlast
Mobile solution?
A. Management Dashboard
B. Gateway
C. Personal User Storage
D. Behavior Risk Engine
C
What are the different command sources that allow you to communicate with the
API server?
A. SmartView Monitor, API_cli Tool, Gaia CLI, Web Services
B. SmartConsole GUI Console, mgmt._cli Tool, Gaia CLI, Web Services
C. SmartConsole GUI Console, API_cli Tool, Gaia CLI, Web Services
D. API_cli Tool, Gaia CLI, Web Services
B
What makes Anti-Bot unique compared to other Threat Prevention mechanisms,
such as URL
Filtering, Anti-Virus, IPS, and Threat Emulation?
A. Anti-Bot is the only countermeasure against unknown malware
B. Anti-Bot is the only protection mechanism which starts a counter-attack
against known Command
& Control Centers
C. Anti-Bot is the only signature-based method of malware protection.
D. Anti-Bot is a post-infection malware protection to prevent a host from
establishing a connection to
a Command & Control Center.
D
Which TCP-port does CPM process listen to?
A. 18191
,B. 18190
C. 8983
D. 19009
D
Which method below is NOT one of the ways to communicate using the
Management API's?
A. Typing API commands using the "mgmt_cli" command
B. Typing API commands from a dialog box inside the SmartConsole GUI
application
C. Typing API commands using Gaia's secure shell(clish)19+
D. Sending API commands over an http connection using web-services
D
Your manager asked you to check the status of SecureXL, and its enable
templates and features,
what command will you use to provide such information to manager?
A. fw accel stat
B. fwaccel stat
C. fw acces stats
D. fwaccel stats
B
SSL Network Extender (SNX) is a thin SSL VPN on-demand client that is installed
on the remote
user's machine via the web browser. What are the two modes of SNX?
A. Application and Client Service
B. Network and Application
C. Network and Layers
D. Virtual Adapter and Mobile App
B
Which command would disable a Cluster Member permanently?
A. clusterXL_admin down
B. cphaprob_admin down
C. clusterXL_admin down-p
D. set clusterXL down-p
C
Which two of these Check Point Protocols are used by SmartEvent Processes?
A. ELA and CPD
B. FWD and LEA
C. FWD and CPLOG
D. ELA and CPLOG
D
,Fill in the blank: The tool ________ generates a R80 Security Gateway
configuration report.
A. infoCP
B. infoview
C. cpinfo
D. fw cpinfo
C
Which of these statements describes the Check Point ThreatCloud?
A. Blocks or limits usage of web applications
B. Prevents or controls access to web sites based on category
C. Prevents Cloud vulnerability exploits
D. A worldwide collaborative security network
D
Automatic affinity means that if SecureXL is running, the affinity for each
interface is automatically
reset every
A. 15 sec
B. 60 sec
C. 5 sec
D. 30 sec
B
Which command will allow you to see the interface status?
A. cphaprob interface
B. cphaprob -I interface
C. cphaprob -a if
D. cphaprob stat
C
Which command can you use to enable or disable multi-queue per interface?
A. cpmq set
B. Cpmqueue set
C. Cpmq config
D. St cpmq enable
A
To help SmartEvent determine whether events originated internally you must
define using the
Initial Settings under General Settings in the Policy Tab. How many options are
available to
calculate the traffic direction?
A. 5 Network; Host; Objects; Services; API
B. 3 Incoming; Outgoing; Network
, C. 2 Internal; External
D. 4 Incoming; Outgoing; Internal; Other
D
There are 4 ways to use the Management API for creating host object with R80
Management API.
Which one is NOT correct?
A. Using Web Services
B. Using Mgmt_cli tool
C. Using CLISH
D. Using SmartConsole GUI console
E. Events are collected with SmartWorkflow from Trouble Ticket systems
E
CoreXL is supported when one of the following features is enabled:
A. Route-based VPN
B. IPS
C. IPv6
D. Overlapping NAT
B
You noticed that CPU cores on the Security Gateway are usually 100% utilized
and many packets
were dropped. You don't have a budget to perform a hardware upgrade at this
time. To optimize
drops you decide to use Priorities Queues and fully enable Dynamic Dispatcher.
How can you
enable them?
A. fw ctl multik dynamic_dispatching on
B. fw ctl multik dynamic_dispatching set_mode 9
C. fw ctl multik set_mode 9
D. fw ctl multik pq enable
A
Check Point Management (cpm) is the main management process in that it
provides the
architecture for a consolidates management console. CPM allows the GUI client
and management
server to communicate via web services using ___________.
A. TCP port 19009
B. TCP Port 18190
C. TCP Port 18191
D. TCP Port 18209
A
Which command is used to set the CCP protocol to Multicast?
