chekpoint 41-80

In R80, Unified Policy is a combination of

• Access control policy, QoS Policy, Desktop Security Policy and endpoint policy
• Access control policy, QoS Policy, Desktop Security Policy and Threat Prevention Policy
• Firewall policy, address Translation and application and URL filtering, QoS Policy, Desktop Security Policy and Threat Prevention Policy.
• Access control policy, QoS Policy, Desktop Security Policy and VPN policy.

Fill in the blank: The command __________ provides the most complete restoration of a R80 configuration.

• upgrade_import

• cpconfig

• fwm dbimport -p

• cpinfo -recover

What does ExternalZone represent in the presented rule?

• The Internet

• Interfaces that administrator has defined to be part of External Security Zone.

• External interfaces on all security gateways.

• External interfaces of specific gateways.

Fill in the blank: The R80 utility fw monitor is used to troubleshoot _____________

• User data base corruption
• LDAP conflicts
• Traffic issues
• Phase two key negotiation

View the rule below. What does the lock-symbol in the left column mean? Select the BEST answer

• The current administrator has read-only permissions to Threat Prevention Policy.

• Another user has locked the rule for editing

• Configuration lock is present. Click the lock symbol to gain read-write access.

• The current administrator is logged in as read-only because someone else is editing the policy.

When attempting to start a VPN tunnel, in the logs the error 'no proposal chosen' is seen numerous times. No other VPN-related log entries are present. Which phase of the VPN negotiations has failed?

• IKE Phase 1
• IPSEC Phase 2
• IPSEC Phase 1
• IKE Phase 2

Which command is used to add users to or from existing roles?

• Add rba user roles
• Add rba user
• Add user roles
• Add user

You are the administrator for ABC Corp. You have logged into your R80 Management server. You are making some changes in the Rule Base and notice that rule No.6 has a pencil icon next to it.

What does this mean?

• The rule No.6 has been marked for deletion in your Management session.

• The rule No.6 has been marked for deletion in another Management session.

• The rule No.6 has been marked for editing in your Management session

• The rule No.6 has been marked for editing in another Management session.

Which type of the Check Point license ties the package license to the IP address of the Security Management Server?

• Local
• Central
• Corporate
• Formal

What is NOT an advantage of Packet Filtering?

• Low Security and No Screening above Network Layer
• Application Independence
• High Performance
• Scalability