156-215.80: Check Point Certified Security Administrator

Fill in the blank: The _________ collects logs and sends them to the _________ .

Log server; security management server
Log server; Security Gateway
Security management server; Security Gateway
Security Gateways; log server

Correct answer: D

The security Gateway is installed on GAiA R80 The default port for the WEB User Interface is _______ .

TCP 18211
TCP 257
TCP 4433
TCP 443

Correct answer: D

Fill in the blank: To build an effective Security Policy, use a ________ and _______ rule.

Cleanup; stealth
Stealth; implicit
Cleanup; default
Implicit; explicit

Correct answer: A

Which type of Check Point license is tied to the IP address of a specific Security Gateway and cannot be transferred to a gateway that has a different IP address?

Central
Corporate
Formal
Local

Correct answer: D

Which utility shows the security gateway general system information statistics like operating system information and resource usage, and individual software blade statistics of VPN, Identity Awareness and DLP?

cpconfig
fw ctl pstat
cpview
fw ctl multik stat

Correct answer: C

Explanation:

CPView Utility is a text based built-in utility that can be run ('cpview' command) on Security Gateway / Security Management Server / Multi-Domain Security Management Server. CPView Utility shows statistical data that contain both general system information (CPU, Memory, Disk space) and information for different Software Blades (only on Security Gateway). The data is continuously updated in easy to access views. Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk101878

CPView Utility is a text based built-in utility that can be run ('cpview' command) on Security Gateway / Security Management Server / Multi-Domain Security Management Server. CPView Utility shows statistical data that contain both general system information (CPU, Memory, Disk space) and information for different Software Blades (only on Security Gateway). The data is continuously updated in easy to access views.

Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk101878

The following graphic shows:

View from SmartLog for logs initiated from source address 10.1.1.202
View from SmartView Tracker for logs of destination address 10.1.1.202
View from SmartView Tracker for logs initiated from source address 10.1.1.202
View from SmartView Monitor for logs initiated from source address 10.1.1.202

Correct answer: C

In R80, Unified Policy is a combination of

Access control policy, QoS Policy, Desktop Security Policy and endpoint policy.
Access control policy, QoS Policy, Desktop Security Policy and Threat Prevention Policy.
Firewall policy, address Translation and application and URL filtering, QoS Policy, Desktop Security Policy and Threat Prevention Policy.
Access control policy, QoS Policy, Desktop Security Policy and VPN policy.

Correct answer: D

Explanation:

D is the best answer given the choices. Unified Policy In R80 the Access Control policy unifies the policies of these pre-R80 Software Blades:Firewall and VPN Application Control and URL Filtering Identity Awareness Data Awareness Mobile Access Security Zones Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm?topic=documents/R80/P_R80_SecMGMT/126197&anchor=o129934

D is the best answer given the choices.

Unified Policy

In R80 the Access Control policy unifies the policies of these pre-R80 Software Blades:

Firewall and VPN
Application Control and URL Filtering
Identity Awareness
Data Awareness
Mobile Access
Security Zones

Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm?topic=documents/R80/P_R80_SecMGMT/126197&anchor=o129934

The command __________ provides the most complete restoration of a R80 configuration.

upgrade_import
cpconfig
fwm dbimport -p <export file>
cpinfo -recover

Correct answer: A

Explanation:

(Should be "migrate import") "migrate import" Restores backed up configuration for R80 version, in previous versions the command was " upgrade_import ". Reference: http://dl3.checkpoint.com/paid/08/08586e2852acc054809517b267402a35/CP_R80_Gaia_InstallationAndUpgradeGuide.pdf?HashKey=1479700086_4553ede4b53a7882cd8052eed7c347be&xtn=.pdf

(Should be "migrate import")

"migrate import" Restores backed up configuration for R80 version, in previous versions the command was " upgrade_import ".

Reference: http://dl3.checkpoint.com/paid/08/08586e2852acc054809517b267402a35/CP_R80_Gaia_InstallationAndUpgradeGuide.pdf?HashKey=1479700086_4553ede4b53a7882cd8052eed7c347be&xtn=.pdf

The Gaia operating system supports which routing protocols?

BGP, OSPF, RIP
BGP, OSPF, EIGRP, PIM, IGMP
BGP, OSPF, RIP, PIM, IGMP
BGP, OSPF, RIP, EIGRP

Correct answer: A

Explanation:

The Advanced Routing Suite The Advanced Routing Suite CLI is available as part of the Advanced Networking Software Blade. For organizations looking to implement scalable, fault-tolerant, secure networks, the Advanced Networking blade enables them to run industry-standard dynamic routing protocols including BGP, OSPF, RIPv1, and RIPv2 on security gateways. OSPF, RIPv1, and RIPv2 enable dynamic routing over a single autonomous system—like a single department, company, or service provider—to avoid network failures. BGP provides dynamic routing support across more complex networks involving multiple autonomous systems—such as when a company uses two service providers or divides a network into multiple areas with different administrators responsible for the performance of each. Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_SecurePlatform_AdvancedRouting_WebAdmin/html_frameset.htm

The Advanced Routing Suite

The Advanced Routing Suite CLI is available as part of the Advanced Networking Software Blade.

For organizations looking to implement scalable, fault-tolerant, secure networks, the Advanced Networking blade enables them to run industry-standard dynamic routing protocols including BGP, OSPF, RIPv1, and RIPv2 on security gateways. OSPF, RIPv1, and RIPv2 enable dynamic routing over a single autonomous system—like a single department, company, or service provider—to avoid network failures. BGP provides dynamic routing support across more complex networks involving multiple autonomous systems—such as when a company uses two service providers or divides a network into multiple areas with different administrators responsible for the performance of each.

Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_SecurePlatform_AdvancedRouting_WebAdmin/html_frameset.htm

Joey wants to configure NTP on R80 Security Management Server. He decided to do this via WebUI. What is the correct address to access the Web UI for Gaia platform via browser?

https://<Device_IP_Address>
https://<Device_IP_Address>:443
https://<Device_IP_Address>:10000
https://<Device_IP_Address>:4434

Correct answer: A

Explanation:

Access to Web UI Gaia administration interface, initiate a connection from a browser to the default administration IP address: Logging in to the WebUI Logging in To log in to the WebUI:1. Enter this URL in your browser:https://<Gaia IP address>2. Enter your user name and password. Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_Gaia_AdminWebAdminGuide/html_frameset.htm?topic=documents/R77/CP_R77_Gaia_AdminWebAdminGuide/75930

Access to Web UI Gaia administration interface, initiate a connection from a browser to the default administration IP address:

Logging in to the WebUI

Logging in

To log in to the WebUI:

1. Enter this URL in your browser:

https://<Gaia IP address>

2. Enter your user name and password.

Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_Gaia_AdminWebAdminGuide/html_frameset.htm?topic=documents/R77/CP_R77_Gaia_AdminWebAdminGuide/75930