CHKP 251 - 300

To find records in the logs that shows log records from the Application URL Filtering Software Blade where traffic was dropped, what would be the query syntax?

• blade:"application control" AND action:drop

• blade;"application control" AND action;drop

• blade: application control AND action:drop

• (blade: application control AND action;drop)

When an encrypted packet is decrypted, where does this happen?

• Inbound chain

• Outbound chain

• Security policy

• Decryption is not supported

Which Check Point daemon invokes and monitors critical processes and attempts to restart them if they fail?

• fwm

• cpd

• cpm

• cpwd

What is the SandBlast Agent designed to do?

• Ensure the Check Point SandBlast services is running on the end user's system

• Clean up email sent with malicious attachments

• If malware enters an end user's system, the SandBlast Agent prevents the malware from spreading with the network

• Performs OS-level sandboxing for SandBlast Cloud architecture

After replacing a faulty Gateway the admin installed the new Hardware and want to push the policy. Installing the policy using the SmartConsole he got an Error for the Threat Prevention Policy. There is no error for the Access Control Policy. What will be the most common cause for the issue?

• The admin forgot to reestablish the SIC for the new hardware. That is typically the case when configure only the interfaces of the replacement hardware instead restoring a backup.

• The IPS Protection engine on the replacement hardware is too old. Before pushing the Threat Prevention Policy use SmartConsole -> Security Policies -> Updates -> IPS 'Update Now' to update the engine.

• The admin forgot to apply the new license. The Access Control license is included by default but the service subscriptions for the Threat Prevention Blades are missing.

• The Threat Prevention Policy can't be installed on a Gateway without an already installed Access Control Policy. First install only the Access Control Policy.

Which one of the following is true about Threat Extraction?

• Takes minutes to complete (less than 3 minutes)

• Takes less than a second to complete

• Works on MS Office and PDF files only

• Always delivers a file

In Advanced Permanent Tunnel Configuration, to set the amount of time the tunnel test runs without a response before the peer host is declared 'down', you would set the_______ ?

• life sign polling interval

• life sign timeout

• life_sign_timeout

• life_sign_polling_interval

Which file contains the host address to be published, the MAC address that needs to be associated with the IP Address, and the unique IP of the interface that responds to ARP request?

• /var/opt/CPshrd-R80/conf/local.arp

• /opt/CPshrd-R80/conf/local.arp

• $CPDIR/conf/local.arp

• $FWDIR/conf/local.arp

What is the recommended configuration when the customer requires SmartLog indexing for 14 days and SmartEvent to keep events for 180 days?

• It is not possible

• Use Multi-Domain Management Server

• Choose different setting for log storage and SmartEvent db

•  Install Management and SmartEvent on different machines

You want to set up a VPN tunnel to an external gateway. You had to make sure that the IKE P2 SA will only be established between two subnets and not all subnets defined in the default VPN domain of your gateway.

• In the SmartConsole create a dedicated VPN Community for both Gateways. On the Gateway add the following line to the $FWDIR/conf/user.def.FW1 file -> subnet_for_range_and_peer = { };

•  In the SmartConsole create a dedicated VPN Community for both Gateways. Go to Security Policies /Access Control and create an in-line layer rule with source and destination containing the two networks used for the IKE P2 SA. Put the name of the Community in the VPN column.

• In the SmartConsole create a dedicated VPN Community for both Gateways. Selecting the local gateway in the Community you can set the VPN Domain to 'User defined' and put in the local network.

• In the SmartConsole create a dedicated VPN Community for both Gateways. On the Management add the following line to the $FWDIR/conf/user.def.FW1 file -> subnet_for_range_and_peer = { };