Question 1

What does the CPTA, Check Point Transfer Agent, do?

Options :

A : CPTA communicates with ThreatCloud to transfer anonymized attack log data and download new signatures.

B : CPTA transfers the policy files from the Security Management Server to the Security Gateway for policy installation.

C : CPTA is the agent built into Gaia that downloads new software updates, including JHFAs and major version installation packages.

D : CPTA is the process that finds and downloads licenses and contracts from the UserCenter to the Security Management Server.

Answer: B

Question 2

Internet Key Exchange, IKE, is a standard key management protocol that is used to do what exactly?

Options :

A : Renew both Phase 1 and Phase 2 IPsec keys when they expire.

B : Renew the Phase 2 key when it expires, after 60 minutes by default.

C : Update the VPN Domain information and renew expired keys when they expire.

D : Create the VPN tunnels by authenticating peers and agreeing on keys and methods to be used for encryption.

Answer: D

Question 3

The Management Server Database is exported during an Advanced Upgrade and later imported on a freshly deployed Management Server. The items that go along with this export include:

Options :

A : Only objects are exported and imported with the database. Policies, certificates, and other settings are not included.

B : Only objects and policies are exported with the database. Certificates are stored in a reserved area and cannot be exported.

C : Network and routing configuration and all settings of the Check Point environment.

D : Objects, policies, certificates, and other settings of the Check Point environment.

Answer: D

Question 4

Choose the best answer about IKEv2.

Options :

A : IKEv2 uses a two-phase concept like IKEv1; they are called Parent and Child.

B : IKEv2 uses a two-phase concept like IKEv1; they are called Main and Quick.

C : IKEv2 uses a two-phase concept like IKEv1; they are called Main and Aggressive.

D : IKEv2 does not use the same phase concept as IKEv1.

Answer: A

Question 5

Choose the correct object name for a third-party, non-Check Point IPsec VPN device.

Options :

A : External Device

B : External Gateway

C : Interoperable Device

D : 3rd-Party Device

Answer: C