CCSA EXAM 94 QUESTIONS
You manage a global network extending from your base in Chicago to Tokyo, Calcutta
and Dallas. Management wants a report detailing the current software level of each
Enterprise class Security Gateway. You plan to take the opportunity to create a
proposal outline, listing the most cost- effective way to upgrade your Gateways. Which
two SmartConsole applications will you use to create this report and outline? -
ANSWER: SmartView Monitor and SmartUpdate
Your bank's distributed R77 installation has Security Gateways up for renewal. Which
SmartConsole application will tell you which Security Gateways have licenses that will
expire within the next 30 days? - ANSWER: SmartUpdate
When launching SmartDashboard, what information is required to log into R77? -
ANSWER: User Name, Password, Management Server IP
Message digests use - ANSWER: SHA-1 and MD5
A hash algorithm? - ANSWER: MD5
Uses the same key to decrypt as it does to encrypt? - ANSWER: Symmetric encryption
You believe Phase 2 negotiations are failing while you are attempting to configure a
site-to-site VPN with one of your firm's business partners. Which SmartConsole
application should you use to confirm your suspicions? - ANSWER: SmartView Tracker
A digital signature - ANSWER: Guarantees the authenticity and integrity of a message.
Which component functions as the Internal Certificate Authority for R77 - ANSWER:
Management Server
The customer has a small Check Point installation, which includes one GAiA server
working as the SmartConsole, and a second server running Windows 2008 as both
Security Management Server and Security Gateway. This is an example of a(n) -
ANSWER: Unsupported configuration
The customer has a small Check Point installation which includes one Windows 2008
server as the SmartConsole and a second server running GAiA as both Security
Management Server and the Security Gateway. This is an example of a(n): - ANSWER:
Stand-Alone Installation
The customer has a small Check Point installation which includes one Windows 7
workstation as the SmartConsole, one GAiA device working as Security Management
, Server, and a third server running SecurePlatform as Security Gateway. This is an
example of a(n): - ANSWER: Distributed Installation
The customer has a small Check Point installation which includes one Windows 2008
server as SmartConsole and Security Management Server with a second server running
GAiA as Security Gateway. This is an example of a(n): - ANSWER: Distributed
Installation.
When doing a Stand-Alone Installation, you would install the Security Management
Server with which other Check Point architecture component? - ANSWER: Security
Gateway
Tom has been tasked to install Check Point R77 in a distributed deployment. Before
Tom installs the systems this way, how many machines will he need if he does NOT
include a SmartConsole machine in his calculations? - ANSWER: Two machines
Which command allows Security Policy name and install date verification on a Security
Gateway? - ANSWER: fw stat -l
You have two rules, ten users, and two user groups in a Security Policy. You create
database version 1 for this configuration. You then delete two existing users and add a
new user group. You modify one rule and add two new rules to the Rule Base. You
save the Security Policy and create database version 2. After awhile, you decide to roll
back to version 1 to use the Rule Base, but you want to keep your user database. How
can you do this? - ANSWER: Restore the entire database, except the user database.
Which feature or command provides the easiest path for Security Administrators to
revert to earlier versions of the same Security Policy and objects configuration? -
ANSWER: Database Revision Control
Your Security Management Server fails and does not reboot. One of your remote
Security Gateways managed by the Security Management Server reboots. What occurs
with the remote Gateway after reboot? - ANSWER: The remote Gateway fetches the
last installed Security Policy locally and passes traffic normally. The Gateway will log
locally, since the Security Management Server is not available.
How can you configure an application to automatically launch on the Security
Management Server when traffic is dropped or accepted by a rule in the Security
Policy? - ANSWER: User-defined alert script
What is NOT useful to verify whether or not a Security Policy is active on a Gateway? -
ANSWER: fw ctl get string active_secpol
Parameters that will NOT be preserved when using Database Revision Control -
ANSWER: SecurePlatform WebUI Users, SIC Certificates, SmartView Tracker audit
You manage a global network extending from your base in Chicago to Tokyo, Calcutta
and Dallas. Management wants a report detailing the current software level of each
Enterprise class Security Gateway. You plan to take the opportunity to create a
proposal outline, listing the most cost- effective way to upgrade your Gateways. Which
two SmartConsole applications will you use to create this report and outline? -
ANSWER: SmartView Monitor and SmartUpdate
Your bank's distributed R77 installation has Security Gateways up for renewal. Which
SmartConsole application will tell you which Security Gateways have licenses that will
expire within the next 30 days? - ANSWER: SmartUpdate
When launching SmartDashboard, what information is required to log into R77? -
ANSWER: User Name, Password, Management Server IP
Message digests use - ANSWER: SHA-1 and MD5
A hash algorithm? - ANSWER: MD5
Uses the same key to decrypt as it does to encrypt? - ANSWER: Symmetric encryption
You believe Phase 2 negotiations are failing while you are attempting to configure a
site-to-site VPN with one of your firm's business partners. Which SmartConsole
application should you use to confirm your suspicions? - ANSWER: SmartView Tracker
A digital signature - ANSWER: Guarantees the authenticity and integrity of a message.
Which component functions as the Internal Certificate Authority for R77 - ANSWER:
Management Server
The customer has a small Check Point installation, which includes one GAiA server
working as the SmartConsole, and a second server running Windows 2008 as both
Security Management Server and Security Gateway. This is an example of a(n) -
ANSWER: Unsupported configuration
The customer has a small Check Point installation which includes one Windows 2008
server as the SmartConsole and a second server running GAiA as both Security
Management Server and the Security Gateway. This is an example of a(n): - ANSWER:
Stand-Alone Installation
The customer has a small Check Point installation which includes one Windows 7
workstation as the SmartConsole, one GAiA device working as Security Management
, Server, and a third server running SecurePlatform as Security Gateway. This is an
example of a(n): - ANSWER: Distributed Installation
The customer has a small Check Point installation which includes one Windows 2008
server as SmartConsole and Security Management Server with a second server running
GAiA as Security Gateway. This is an example of a(n): - ANSWER: Distributed
Installation.
When doing a Stand-Alone Installation, you would install the Security Management
Server with which other Check Point architecture component? - ANSWER: Security
Gateway
Tom has been tasked to install Check Point R77 in a distributed deployment. Before
Tom installs the systems this way, how many machines will he need if he does NOT
include a SmartConsole machine in his calculations? - ANSWER: Two machines
Which command allows Security Policy name and install date verification on a Security
Gateway? - ANSWER: fw stat -l
You have two rules, ten users, and two user groups in a Security Policy. You create
database version 1 for this configuration. You then delete two existing users and add a
new user group. You modify one rule and add two new rules to the Rule Base. You
save the Security Policy and create database version 2. After awhile, you decide to roll
back to version 1 to use the Rule Base, but you want to keep your user database. How
can you do this? - ANSWER: Restore the entire database, except the user database.
Which feature or command provides the easiest path for Security Administrators to
revert to earlier versions of the same Security Policy and objects configuration? -
ANSWER: Database Revision Control
Your Security Management Server fails and does not reboot. One of your remote
Security Gateways managed by the Security Management Server reboots. What occurs
with the remote Gateway after reboot? - ANSWER: The remote Gateway fetches the
last installed Security Policy locally and passes traffic normally. The Gateway will log
locally, since the Security Management Server is not available.
How can you configure an application to automatically launch on the Security
Management Server when traffic is dropped or accepted by a rule in the Security
Policy? - ANSWER: User-defined alert script
What is NOT useful to verify whether or not a Security Policy is active on a Gateway? -
ANSWER: fw ctl get string active_secpol
Parameters that will NOT be preserved when using Database Revision Control -
ANSWER: SecurePlatform WebUI Users, SIC Certificates, SmartView Tracker audit
