Checkpoint vol.1 - 1-30

When enabling tracking on a rule, what is the default option?

• Accounting Log
• Extended Log
• Log
• Detailed Log

Gaia includes Check Point Upgrade Service Engine (CPUSE), which can directly receive updates for what components?

• The Security Gateway (SG) and Security Management Server (SMS) software and the CPUSE engine.
• Licensed Check Point products for the Gala operating system and the Gaia operating system itself.
• The CPUSE engine and the Gaia operating system.
• The Gaia operating system only.

Name the file that is an electronically signed file used by Check Point to translate the features in the license into a code?

• Both License (.lic) and Contract (.xml) files

• cp.macro
• Contract file (.xml)
• license File (.lie)

Fill in the blank: When LDAP is integrated with Check Point Security Management, it is then referred to as _______.

• User Center
• User Administration
• User Directory
• UserCheck

Can you use the same layer in multiple policies or rulebases?

• Yes - a layer can be shared with multiple policies and rules.
• No - each layer must be unique.
• No - layers cannot be shared or reused, but an identical one can be create
• Yes - but it must be copied and pasted with a different name.

Tom has connected to the Management Server remotely using SmartConsole and is in the process of making some Rule Base changes, when he suddenly loses connectivity. Connectivity is restored shortly afterwar What will happen to the changes already made?

• Tom will have to reboot his SmartConsole computer, clear the cache, and restore changes.
• Tom will have to reboot his SmartConsole computer, and access the Management cache store on that computer, which is only accessible after a reboot
• Tom's changes will be lost since he lost connectivity and he will have to start again.
• Tom's changes will have been stored on the Management when he reconnects and he will not lose any of his work.

Security Gateway software blades must be attached to what?

• Security Gateway
• Security Gateway container
• Management server
• Management container

Which tool allows you to monitor the top bandwidth on smart console?

• Logs & Monitoring
• Smart Event
• Gateways & Severs Tab
• SmartView Monitor

A security zone is a group of one or more network interfaces from different centrally managed gateways. What is considered part of the zone?

• The zone is based on the network topology and determined according to where the interface leads to.
• Security Zones are not supported by Check Point firewalls.

• The firewall rule can be configured to include one or more subnets in a zone.
• The local directly connected subnet defined by the subnet IP and subnet mask.

When comparing Stateful Inspection and Packet Filtering, what is a benefit that Stateful Inspection offers over Packer Filtering?

• Stateful Inspection offers unlimited connections because of virtual memory usage.
• Stateful Inspection offers no benefits over Packet Filtering.

• Stateful Inspection does not use memory to record the protocol used by the connection.
• Only one rule is required for each connection.