CCSA

What are the three authentication methods for SIC?

• A. Passwords, Users, and standards-based SSL for the creation of security channels

• B. Certificates, standards-based SSL for the creation of secure channels, and 3DES or AES128 for encryption

• C. Packet Filtering, certificates, and 3DES or AES128 for encryption

• D. Certificates, Passwords, and Tokens

You have enabled “Full Log” as a tracking option to a security rule. However, you are still not seeing any data type information. What is the MOST likely reason?

• A. Logging has disk space issues. Change logging storage options on the logging server or Security Management Server properties and install database

• B. Data Awareness is not enabled

• C. Identity Awareness is not enabled.

• D. Logs are arriving from Pre-R80 gateways.

An identity server uses a ___________ for user authentication.

• A. Shared secret

• B. Certificate

• C. One-time password

• D. Token

After trust has been established between the Check Point components, what is TRUE about name and IP-address changes?

• A. Security Gateway IP-address cannot be changed without re-establishing the trust

• B. The Security Gateway name cannot be changed in command line without re-establishing trust

• C. The Security Management Server name cannot be changed in SmartConsole without re-establishing trust

• D. The Security Management Server IP-address cannot be changed without re-establishing the trust

To create policy for traffic to or from a particular location, use the _____________.

• A. DLP shared policy

• B. Geo policy shared policy

• C. Mobile Access software blade

• D. HTTPS inspection

Which GUI tool can be used to view and apply Check Point licenses?

• A. cpconfig

• B. Management Command Line

• C. SmartConsole

• D. SmartUpdate

Tom has connected to the R80 Management Server remotely using SmartConsole and is in the process of making some Rule Base changes, when he suddenly loses connectivity. Connectivity is restored shortly afterward. What will happen to the changes already made:

• A. Tom’s changes will have been stored on the Management when he reconnects and he will not lose any of this work

• B. Tom will have to reboot his SmartConsole computer, and access the Management cache store on that computer, which is only accessible after a reboot.

• C. Tom’s changes will be lost since he lost connectivity and he will have to start again.

• D. Tom will have to reboot his SmartConsole computer, clear the cache and restore changes.

Which of the following commands is used to verify license installation?

• A. Cplic verify license

• B. Cplic print

• C. Cplic show

• D. Cplic license

The SIC Status “Unknown” means

• A. There is connection between the gateway and Security Management Server but it is not trusted.

• B. The secure communication is established.

• C. There is no connection between the gateway and Security Management Server.

• D. The Security Management Server can contact the gateway, but cannot establish SIC.

Which tool provides a list of trusted files to the administrator so they can specify to the Threat Prevention blade that these files do not need to be scanned or analyzed?

• A. ThreatWiki

• B. Whitelist Files

• C. AppWiki

• D. IPS Protections