CHECK POINT CERTIFIED SECURITY
EXPERT - R80 EXAM ACTUAL
QUESTIONS AND CORRECT ANSWERS
Identify the API that is not supported by Check Point currently.
A. R80 Management API
B. Identity Awareness Web Services API
C. Open REST API
D. OPSEC SDK - CORRECT ANSWERS✅✅C
SandBlast Mobile identifies threats in mobile devices by using on-device, network, and
cloudbased algorithms and has four dedicated components that constantly work together to
protect
mobile devices and their data. Which component is NOT part of the SandBlast Mobile
solution?
A. Management Dashboard
B. Gateway
C. Personal User Storage
D. Behavior Risk Engine - CORRECT ANSWERS✅✅C
What are the different command sources that allow you to communicate with the API server?
A. SmartView Monitor, API_cli Tool, Gaia CLI, Web Services
B. SmartConsole GUI Console, mgmt._cli Tool, Gaia CLI, Web Services
C. SmartConsole GUI Console, API_cli Tool, Gaia CLI, Web Services
D. API_cli Tool, Gaia CLI, Web Services - CORRECT ANSWERS✅✅B
What makes Anti-Bot unique compared to other Threat Prevention mechanisms, such as URL
Filtering, Anti-Virus, IPS, and Threat Emulation?
,A. Anti-Bot is the only countermeasure against unknown malware
B. Anti-Bot is the only protection mechanism which starts a counter-attack against known
Command
& Control Centers
C. Anti-Bot is the only signature-based method of malware protection.
D. Anti-Bot is a post-infection malware protection to prevent a host from establishing a
connection to
a Command & Control Center. - CORRECT ANSWERS✅✅D
Which TCP-port does CPM process listen to?
A. 18191
B. 18190
C. 8983
D. 19009 - CORRECT ANSWERS✅✅D
Which method below is NOT one of the ways to communicate using the Management API's?
A. Typing API commands using the "mgmt_cli" command
B. Typing API commands from a dialog box inside the SmartConsole GUI application
C. Typing API commands using Gaia's secure shell(clish)19+
D. Sending API commands over an http connection using web-services - CORRECT
ANSWERS✅✅D
Your manager asked you to check the status of SecureXL, and its enable templates and
features,
what command will you use to provide such information to manager?
A. fw accel stat
B. fwaccel stat
,C. fw acces stats
D. fwaccel stats - CORRECT ANSWERS✅✅B
SSL Network Extender (SNX) is a thin SSL VPN on-demand client that is installed on the
remote
user's machine via the web browser. What are the two modes of SNX?
A. Application and Client Service
B. Network and Application
C. Network and Layers
D. Virtual Adapter and Mobile App - CORRECT ANSWERS✅✅B
Which command would disable a Cluster Member permanently?
A. clusterXL_admin down
B. cphaprob_admin down
C. clusterXL_admin down-p
D. set clusterXL down-p - CORRECT ANSWERS✅✅C
Which two of these Check Point Protocols are used by SmartEvent Processes?
A. ELA and CPD
B. FWD and LEA
C. FWD and CPLOG
D. ELA and CPLOG - CORRECT ANSWERS✅✅D
Fill in the blank: The tool ________ generates a R80 Security Gateway configuration report.
A. infoCP
B. infoview
, C. cpinfo
D. fw cpinfo - CORRECT ANSWERS✅✅C
Which of these statements describes the Check Point ThreatCloud?
A. Blocks or limits usage of web applications
B. Prevents or controls access to web sites based on category
C. Prevents Cloud vulnerability exploits
D. A worldwide collaborative security network - CORRECT ANSWERS✅✅D
Automatic affinity means that if SecureXL is running, the affinity for each interface is
automatically
reset every
A. 15 sec
B. 60 sec
C. 5 sec
D. 30 sec - CORRECT ANSWERS✅✅B
Which command will allow you to see the interface status?
A. cphaprob interface
B. cphaprob -I interface
C. cphaprob -a if
D. cphaprob stat - CORRECT ANSWERS✅✅C
Which command can you use to enable or disable multi-queue per interface?
A. cpmq set
B. Cpmqueue set
EXPERT - R80 EXAM ACTUAL
QUESTIONS AND CORRECT ANSWERS
Identify the API that is not supported by Check Point currently.
A. R80 Management API
B. Identity Awareness Web Services API
C. Open REST API
D. OPSEC SDK - CORRECT ANSWERS✅✅C
SandBlast Mobile identifies threats in mobile devices by using on-device, network, and
cloudbased algorithms and has four dedicated components that constantly work together to
protect
mobile devices and their data. Which component is NOT part of the SandBlast Mobile
solution?
A. Management Dashboard
B. Gateway
C. Personal User Storage
D. Behavior Risk Engine - CORRECT ANSWERS✅✅C
What are the different command sources that allow you to communicate with the API server?
A. SmartView Monitor, API_cli Tool, Gaia CLI, Web Services
B. SmartConsole GUI Console, mgmt._cli Tool, Gaia CLI, Web Services
C. SmartConsole GUI Console, API_cli Tool, Gaia CLI, Web Services
D. API_cli Tool, Gaia CLI, Web Services - CORRECT ANSWERS✅✅B
What makes Anti-Bot unique compared to other Threat Prevention mechanisms, such as URL
Filtering, Anti-Virus, IPS, and Threat Emulation?
,A. Anti-Bot is the only countermeasure against unknown malware
B. Anti-Bot is the only protection mechanism which starts a counter-attack against known
Command
& Control Centers
C. Anti-Bot is the only signature-based method of malware protection.
D. Anti-Bot is a post-infection malware protection to prevent a host from establishing a
connection to
a Command & Control Center. - CORRECT ANSWERS✅✅D
Which TCP-port does CPM process listen to?
A. 18191
B. 18190
C. 8983
D. 19009 - CORRECT ANSWERS✅✅D
Which method below is NOT one of the ways to communicate using the Management API's?
A. Typing API commands using the "mgmt_cli" command
B. Typing API commands from a dialog box inside the SmartConsole GUI application
C. Typing API commands using Gaia's secure shell(clish)19+
D. Sending API commands over an http connection using web-services - CORRECT
ANSWERS✅✅D
Your manager asked you to check the status of SecureXL, and its enable templates and
features,
what command will you use to provide such information to manager?
A. fw accel stat
B. fwaccel stat
,C. fw acces stats
D. fwaccel stats - CORRECT ANSWERS✅✅B
SSL Network Extender (SNX) is a thin SSL VPN on-demand client that is installed on the
remote
user's machine via the web browser. What are the two modes of SNX?
A. Application and Client Service
B. Network and Application
C. Network and Layers
D. Virtual Adapter and Mobile App - CORRECT ANSWERS✅✅B
Which command would disable a Cluster Member permanently?
A. clusterXL_admin down
B. cphaprob_admin down
C. clusterXL_admin down-p
D. set clusterXL down-p - CORRECT ANSWERS✅✅C
Which two of these Check Point Protocols are used by SmartEvent Processes?
A. ELA and CPD
B. FWD and LEA
C. FWD and CPLOG
D. ELA and CPLOG - CORRECT ANSWERS✅✅D
Fill in the blank: The tool ________ generates a R80 Security Gateway configuration report.
A. infoCP
B. infoview
, C. cpinfo
D. fw cpinfo - CORRECT ANSWERS✅✅C
Which of these statements describes the Check Point ThreatCloud?
A. Blocks or limits usage of web applications
B. Prevents or controls access to web sites based on category
C. Prevents Cloud vulnerability exploits
D. A worldwide collaborative security network - CORRECT ANSWERS✅✅D
Automatic affinity means that if SecureXL is running, the affinity for each interface is
automatically
reset every
A. 15 sec
B. 60 sec
C. 5 sec
D. 30 sec - CORRECT ANSWERS✅✅B
Which command will allow you to see the interface status?
A. cphaprob interface
B. cphaprob -I interface
C. cphaprob -a if
D. cphaprob stat - CORRECT ANSWERS✅✅C
Which command can you use to enable or disable multi-queue per interface?
A. cpmq set
B. Cpmqueue set
