CCSE-5

Aaron is a Cyber Security Engineer working for Global Law Firm with large scale deployment of Check Point Enterprise Appliances running GAiA R80.X. The Network Security Developer Team is having an issue testing the API with a newly deployed R80.X Security Management Server. Aaron wants to confirm API services are working properly. What should he do first?

• Aaron should check API Server status with “api status" from Expert mode. If services are stopped, he should start them with “api start".

• Aaron should check API Server status with “cpapi status" from Expert mode. If services are stopped, he should start them with "cpapi start”.

• Aaron should check API Server status with “fwm api status” from Expert mode. If services are stopped, he should start them with “fwm api start".

• Aaron should check API Server status with "cpm api status” from Expert mode. If services are stopped, he should start them with “cpi api start".

For Management High Availability, which of the following is NOT a valid synchronization status?

• Collision

• Lagging

• Never been synchronized

• Down

If the Active Security Management Server falls or if it becomes necessary to change the Active to Standby, the following steps must be taken to prevent data loss.

Providing the Active Security Management Server is responsive, which of these steps should NOT be performed:

• Rename the hostname of the Standby member to match exactly the hostname of the Active member.

• Change the Active Security Management Server to Standby.

• Manually synchronize the Active and Standby Security Management Servers.

• Change the Standby Security Management Server to Active.

What should the admin do in case the Primary Management Server is temporary down?

• Run the ‘promote_util’ to activate the Secondary Management server.

• The Secondary will take over automatically. Change the IP in SmartConsole to logon to the private IP of the Secondary Management Server.

• Use the VIP in SmartConsole you always reach the active Management Server.

• Logon with SmartConsole to the Secondary Management Server and choose ‘Make Active’ under Actions in the HA Management Menu.

Check Point Management (cpm) is the main management process in that it provides the architecture for a consolidated management console. It empowers the migration from legacy Client-side logic to Server-side logic. The cpm process

• Performs database tasks such as creating, deleting, and modifying objects and compiling policy.

• Allows SmartConsole to communicate over TCP Port 19001

• Performs database tasks such as creating, deleting, and modifying objects and indexing logs

• Allows SmartConsole to communicate over TCP Port 18190

Which Check Point daemon invokes and monitors critical processes and attempts to restart them if they fail?

• cpm

• cpwd

• fwm

• cpd

John is using Management HA. Which Security Management Server should he use for making changes?

• Primary Log Server

• connect virtual IP of Smartcenter HA

• active SmartConsole

• secondary Smartcenter

Name the authentication method that requires token authenticator.

• SecureID

• DynamicID

• Radius

• TACACS

Fill in the blank. With the User Directory Software Blade, you can create user definitions on a(n)_______ Server.

• SecurID

• NT domain

• LDAP

• SMTP

Which command is used to display status information for various components?

• show sysenv all

• show all systems

• show system messages

• sysmess all