WorksheetsCCSA-1
Total questions: 30
Worksheet time: 15mins
When enabling tracking on a rule, what is the default option?
Accounting Log
Extended Log
Log
Detailed Log
Gaia includes Check Point Upgrade Service Engine (CPUSE), which can directly receive updates for what components?
The Security Gateway (SG) and Security Management Server (SMS) software and the CPUSE engine.
Licensed Check Point products for the Gaia operating system and the Gaia operating system itself.
The CPUSE engine and the Gaia operating system.
The Gaia operating system only.
Name the file that is an electronically signed file used by Check Point to translate the features in the license into a code?
Both License (.lic) and Contract (.xml) files
cp.macro
Contract file (.xml)
license File (.lie)
Fill in the blank: When LDAP is integrated with Check Point Security Management, it is then referred to as _______.
User Center
User Administration
User Directory
UserCheck
Can you use the same layer in multiple policies or rulebases?
Yes - a layer can be shared with multiple policies and rules.
No - each layer must be unique.
No - layers cannot be shared or reused, but an identical one can be created.
Yes - but it must be copied and pasted with a different name.
When URL Filtering is set, what identifying data gets sent to the Check Point Online Web Service?
The URL and server certificate are sent to the Check Point Online Web Service
The full URL, including page data, is sent to the Check Point Online Web Service
The host part of the URL is sent to the Check Point Online Web Service
The URL and IP address are sent to the Check Point Online Web Service
Which deployment adds a Security Gateway to an existing environment without changing IP routing?
Remote
Standalone
Distributed
Bridge Mode
Name the pre-defined Roles included in Gaia OS.
AdminRole, and MonitorRole
ReadWriteRole, and ReadyOnly Role
AdminRole, cloningAdminRole, and Monitor Role
AdminRole
Gaia has two default user accounts that cannot be deleted. What are those user accounts?
Admin and Default
Expert and Clish
Control and Monitor
Admin and Monitor
Name the authentication method that requires token authenticator.
SecurID
Radius
DynamicID
TACACS
Which single Security Blade can be turned on to block both malicious files from being downloaded as well as block websites known to host malware?
Anti-Bot
None - both Anti-Virus and Anti-Bot are required for this
Anti-Virus
None - both URL Filtering and Anti-Virus are required for this.
Log query results can be exported to what file format?
Word Document (docx)
Comma Separated Value (csv)
Portable Document Format (pdf)
Text (txt)
There are four policy types available for each policy package. What are those policy types?
Access Control, Threat Prevention, Mobile Access and HTTPS Inspection
Access Control, Custom Threat Prevention, Autonomous Threat Prevention and HTTPS Inspection
There are only three policy types: Access Control, Threat Prevention and NAT.
Access Control, Threat Prevention, NAT and HTTPS Inspection
Which tool allows for the automatic updating of the Gaia OS and Check Point products installed on the Gaia OS?
CPASE - Check Point Automatic Service Engine
CPAUE - Check Point Automatic Update Engine
CPDAS - Check Point Deployment Agent Service
CPUSE - Check Point Upgrade Service Engine
The purpose of the Communication Initialization process is to establish a trust between the Security Management Server and the Check Point gateways. Which statement best describes this Secure Internal Communication (SIC)?
After successful initialization, the gateway can communicate with any Check Point node that possesses a SIC certificate signed by the same ICA.
Secure Internal Communications authenticates the security gateway to the SMS before http communications are allowed.
A SIC certificate is automatically generated on the gateway because the gateway hosts a subordinate CA to the SMS ICA.
New firewalls can easily establish the trust by using the expert password defined on the SMS and the SMS IP address.
Fill in the blank: SmartConsole, SmartEvent GUI client, and ___________ allow viewing of billions of consolidated logs and shows them as prioritized security events.
SmartView Web Application
SmartTracker
SmartMonitor
SmartReporter
What kind of NAT enables Source Port Address Translation by default?
Automatic Static NAT
Manual Hide NAT
Automatic Hide NAT
Manual Static NAT
Application Control/URL filtering database library is known as:
Application database
AppWiki
Application-Forensic Database
Application Library
What are the types of Software Containers?
Smart Console, Security Management, and Security Gateway
Security Management, Security Gateway, and Endpoint Security
Security Management, Log & Monitoring, and Security Policy
Security Management, Standalone, and Security Gateway
Stateful Inspection compiles and registers connections where?
Connection Cache
State Cache
State Table
Network Table
Security Zones do no work with what type of defined rule?
Application Control rule
Manual NAT rule
IPS bypass rule
Firewall rule
Most Check Point deployments use Gaia but which product deployment utilizes special Check Point code (with unification in R81.10)?
Enterprise Network Security Appliances
Rugged Appliances
Scalable Platforms
Small Business and Branch Office Appliances
Which of the following is NOT a valid deployment option?
All-in-one (stand-alone)
CloudGuard
Bridge Mode
Distributed
Which of the following is NOT a method used by Identity Awareness for acquiring identity?
Remote Access
Cloud IdP (Identity Provider)
Active Directory Query
RADIUS
What Check Point tool is used to automatically update Check Point products for the Gaia OS?
Check Point Update Engine
Check Point Upgrade Service Engine (CPUSE)
Check Point Upgrade Installation Service
Check Point INSPECT Engine
What are the advantages of a "shared policy"?
Allows the administrator to share a policy between all the users identified by the Security Gateway.
Allows the administrator to share a policy so that it is available to use in another Policy Package.
Allows the administrator to share a policy between all the administrators managing the Security Management Server.
Allows the administrator to install a policy on one Security Gateway and it gets installed on another managed Security Gateway.
URL Filtering cannot be used to:
Control Bandwidth issues
Control Data Security
Improve organizational security
Decrease legal liability
Which SmartConsole application shows correlated logs and aggregated data to provide an overview of potential threats and attack patterns?
SmartEvent
SmartView Tracker
SmartLog
SmartView Monitor
Which of the following is used to extract state related information from packets and store that information in state tables?
STATE Engine
TRACK Engine
RECORD Engine
INSPECT Engine
Which part of SmartConsole allows administrators to add, edit delete, and clone objects?
Object Browser
Object Editor
Object Navigator
Object Explorer
