Question 1

John is using Management HA. Which Security Management Server should he use for making changes?

Options :

A : secondary Smartcenter

B : active SmartConsole

C : connect virtual IP of Smartcenter HA

D : primary Log Server

Answer: B

Question 2

What are the correct sleps upgrading a HA cluster (Ml is active. M2 is passive) using Multi-Version Cluster(MVC) Upgrade?

Options :

A :

1) Enable the MVC mechanism on both cluster members «cphaprob mvc on

2) Upgrade the passive node M2 to R81.10

3) In SmartConsole. change the version of the cluster object

4) Install the Access Control Policy and make sure that the installation will not stop if installation on one

cluster member fails

5) After examine the cluster states upgrade node M1 to R81.10

6) On each Cluster Member, disable the MVC mechanism

B :

1) Enable the MVC mechanism on both cluster members #cphaprob mvc on

2) Upgrade the passive node M2 to R81.10

3) In SmartConsole. change the version of the cluster object

4) Install the Access Control Policy

5) After examine the cluster states upgrade node M1 to R81.10

6) On each Cluster Member, disable the MVC mechanism and Install the Access Control Policy

C :

1) In SmartConsole. change the version of the cluster object

2) Upgrade the passive node M2 to R81.10

3) Enable the MVC mechanism on the upgraded R81.10 Cluster Member M2 Wcphaconf mvc on

4) Install the Access Control Policy and make sure that the installation will not stop if installation on one

cluster member fails

5) After examine the cluster states upgrade node M1 to R81.10

6) On each Cluster Member, disable the MVC mechanism and Install the Access Control Policy

SmartConsole. change the version of the cluster object

D :

1) Upgrade the passive node M2 to R81.10

2) Enable the MVC mechanism on the upgraded R81.10 Cluster Member M2 ttcphaconf mvc on

3) In SmartConsole, change the version of the cluster object 4} Install the Access Control Policy

5) After examine the cluster states upgrade node M1 to R81.10

6) On each Cluster Member, disable the MVC mechanism and Install the Access Control Policy upgrade

the passive node M2 to R81.10

Answer: D

Question 3

Fill in the blank: The R81 feature _____ permits blocking specific IP addresses for a specified time period.

Options :

A : Block Port Overflow

B : Local Interface Spoofing

C : Suspicious Activity Monitoring

D : Adaptive Threat Prevention

Answer: C

Question 4

Which packet info is ignored with Session Rate Acceleration?

Options :

A : source port ranges

B : source ip

C : source port

D : same info from Packet Acceleration is used

Answer: C

Question 5

What are types of Check Point APIs available currently as part of R81.20 code?

Options :

A : Security Gateway API Management API, Threat Prevention API and Identity Awareness Web Services API

B : Management API, Threat Prevention API, Identity Awareness Web Services API and OPSEC SDK API

C : OSE API, OPSEC SDK API, Threat Extraction API and Policy Editor API

D : CPMI API, Management API, Threat Prevention API and Identity Awareness Web Services API

Answer: B