Question 1.
Control connections between the Security Management Server and the Gateway are not encrypted by the VPN Community. 

How are these connections secured?

A. They are encrypted and authenticated using SIC.
B. They are not encrypted, but are authenticated by the Gateway
C. They are secured by PPTP
D. They are not secured.

Answer: D

Explanation: 

Question 2.
If Bob wanted to create a Management High Availability configuration, what is the minimum number of Security Management servers required in order to achieve his goal?

A. Three
B. Two
C. Four
D. One

Answer: D

Explanation: 

Question 3.
David wants to manage hundreds of gateways using a central management tool. 

What tool would David use to accomplish his goal?

A. SmartProvisioning
B. SmartBlade
C. SmartDashboard
D. SmartLSM

Answer: B

Explanation: 

Question 4.
From the following output of cphaprob state, which ClusterXL mode is this?

A. New mode
B. Multicast mode
C. Legacy mode
D. Unicast mode

Answer: D

Explanation: 

Question 5.
Which of the following is NOT a feature of ClusterXL?

A. Enhanced throughput in all ClusterXL modes (2 gateway cluster compared with 1 gateway)
B. Transparent failover in case of device failures
C. Zero downtime for mission-critical environments with State Synchronization
D. Transparent upgrades

Answer: C

Explanation: 

Question 6.
In which case is a Sticky Decision Function relevant?

A. Load Sharing - Unicast
B. Load Balancing - Forward
C. High Availability
D. Load Sharing - Multicast

Answer: C

Explanation: 

Question 7.
You configure a Check Point QoS Rule Base with two rules: an HTTP rule with a weight of 40, and the Default Rule with a weight of 10. If the only traffic passing through your QoS Module is HTTP traffic, what percent of bandwidth will be allocated to the HTTP traffic?

A. 80%
B. 40%
C. 100%
D. 50%

Answer: D

Explanation: 

Question 8.
You have pushed a policy to your firewall and you are not able to access the firewall. 

What command will allow you to remove the current policy from the machine?

A. fw purge policy
B. fw fetch policy
C. fw purge active
D. fw unloadlocal

Answer: A

Explanation: 

Question 9.
How do you verify the Check Point kernel running on a firewall?

A. fw ctl get kernel
B. fw ctl pstat
C. fw kernel
D. fw ver -k

Answer: B

Explanation: 

Question 10.
The process ________________ compiles $FWDIR/conf/*.W files into machine language. 

A. fw gen
B. cpd
C. fwd
D. fwm

Answer: A

Explanation: 

	Web www.certsbraindumps.com