CHKP3 151 - 200

What destination versions are supported for a Multi-Version Cluster Upgrade?

• R80.10 and Later

• R77.30 and Later

• R76 and Later

• R70 and Later

Which command can you use to verify the number of active concurrent connections?

• fw ctl pstat

• show connections

• show all connections

• fw conn all

Automation and Orchestration differ in that:

• Orchestration relates to codifying tasks, whereas automation relates to codifying processes.

• Orchestration is concerned with executing a single task, whereas automation takes a series of tasks and puts them all together into a process workflow.

• Automation involves the process of coordinating an exchange of information through web service interactions such as XML and JSON, but orchestration does not involve processes.

• Automation relates to codifying tasks, whereas orchestration relates to codifying processes.

CoreXL is NOT supported when one of the following features is enabled:

• Route-based VPN

• IPS

• IPv6

• Overlapping NAT

Vanessa is expecting a very important Security Report. The Document should be sent as an attachment via e-mail. An e-mail with Security_report.pdf file was delivered to her e-mail inbox. When she opened the PDF file, she noticed that the file is basically empty and only few lines of text are in it. The report is missing some graphs, tables and links. Which component of SandBlast protection is her company using on a Gateway?

• SandBlast Agent

• SandBlast Threat Extraction

• Check Point Protect

• SandBlast Threat Emulation

In terms of “Order of Rule Enforcement”. When a packet arrives at the gateway, the gateway checks it against the rules in the top Policy Layer, sequentially from top to bottom. Which Statement is correct?

• If the rule does not match in the Network policy it will continue to other enabled polices.

• If the Action of the matching rule is Drop, the gateway continues to check rules in the next Policy Layer down.

• If the Action of the matching rule is Accept, the gateway will drop the packet.

• If the Action of the matching rule is Drop, the gateway stops matching against later rules in the Policy Rule Base and drops the packet.

SecureXL is able to accelerate the Connection Rate using templates. Which attributes are used in the template to identify the connection?

• Source address, Destination address, Source port, Destination port

• Source address, Destination address, Destination port

• Source address, Destination address, Destination port, Protocol

• Source address, Destination address, Source port, Destination port, Protocol

Using Threat Emulation technologies, what is the best way to block .exe and .bat file types?

• create FW rule for particular protocol

• tecli advanced attributes set prohibited_file_types.exe.bat

• Enable .exe bat protection in IPS Policy

• enable DLP and select .exe and .bat file type

In which formats can Threat Emulation forensics reports be viewed in?

• PDF and HTML

• PDF and TXT

• TXT, XML and CSV

• PDF, HTML, and XML

In ClusterXL Load Sharing Multicast Mode:

• every member of the cluster received all of the packets sent to the cluster IP address.

• only the secondary member receives packets sent to the cluster IP address.

• packets sent to the cluster IP address are distributed equally between all members of the cluster.

• only the primary member received packets sent to the cluster IP address.