Question 1

What must be taken into consideration in some scenarios with Manual NAT rules?

Options :

A : You must edit the $FWDIR/conf/local.arp file on the Management Server with vi.

B : In Global Properties, under NAT, you must activate “Automatic ARP Configuration,” which is not activated by default.

C : In Global Properties, under NAT, you must activate “Merge Manual Proxy ARP Configuration,” and you must configure Manual Proxy ARP via Gaia Portal.

D : You must add a manual NAT rule between two automatically created NAT rules.

Answer: C

Question 2

Choose the correct object name for a third-party, non-Check Point IPsec VPN device.

Options :

A : External Device

B : External Gateway

C : Interoperable Device

D : 3rd-Party Device

Answer: C

Question 3

How would you import an exported Management Database?

Options :

A : $FWDIR/usr/bin/migrate import /

B : $FWDIR/scripts/migrate_server import -v R82 /

.tgz

C : $FWDIR/bin/upgrade_tools/migrate import

D : You can only accomplish this task via Gaia Portal.

Answer: B

Question 4

What does the CPTA, Check Point Transfer Agent, do?

Options :

A : CPTA communicates with ThreatCloud to transfer anonymized attack log data and download new signatures.

B : CPTA transfers the policy files from the Security Management Server to the Security Gateway for policy installation.

C : CPTA is the agent built into Gaia that downloads new software updates, including JHFAs and major version installation packages.

D : CPTA is the process that finds and downloads licenses and contracts from the UserCenter to the Security Management Server.

Answer: B

Question 5

Which of the interface ports are bonded after the initial setup and configuration of an ElasticXL Cluster?

Options :

A : magg1 and Sync

B : Mgmt and Sync

C : Management and magg1

D : Management and Sync

Answer: A