Which two Identity Awareness commands are used to support identity sharing?

• A.Policy Decision Point (PDP) and Policy Enforcement Point (PEP)
• B.Policy Enforcement Point (PEP) and Policy Manipulation Point (PMP)
• C.Policy Manipulation Point (PMP) and Policy Activation Point (PAP)
• D.Policy Activation Point (PAP) and Policy Decision Point (PDP)

Comment: *

Name: *

Email: *

Verification: *

While enabling the Identity Awareness blade the Identity Awareness wizard does not automatically detect the windows domain. Why does it not detect the windows domain?

• A.Security Gateways is not part of the Domain
• B.SmartConsole machine is not part of the domain
• C.SMS is not part of the domain
• D.Identity Awareness is not enabled on Global properties

Correct Answer: B

Explanation/Reference:
Explanation: To enable Identity Awareness:
1. Log in to SmartDashboard.
2. From the Network Objects tree, expand the Check Point branch.
3. Double-click the Security Gateway on which to enable Identity Awareness.
4. In the Software Blades section, select Identity Awareness on the Network Security tab.
The Identity Awareness Configuration wizard opens.
5. Select one or more options. These options set the methods for acquiring identities of managed and unmanaged assets.
AD Query - Lets the Security Gateway seamlessly identify Active Directory users and computers.

Browser-Based Authentication - Sends users to a Web page to acquire identities from unidentified

users. If Transparent Kerberos Authentication is configured, AD users may be identified transparently.
Terminal Servers - Identify users in a Terminal Server environment (originating from one IP address).

See Choosing Identity Sources.
Note - When you enable Browser-Based Authentication on a Security Gateway that is on an IP Series appliance, make sure to set the Voyager management application port to a port other than 443 or 80.
6. Click Next.
The Integration With Active Directory window opens.
When SmartDashboard is part of the domain, SmartDashboard suggests this domain automatically. If you select this domain, the system creates an LDAP Account Unit with all of the domain controllers in the organization's Active Directory.
Reference: https://sc1.checkpoint.com/documents/R76/
CP_R76_IdentityAwareness_AdminGuide/62050.htm

Comment: *

Name: *

Email: *

Verification: *

Your users are defined in a Windows 2008 R2 Active Directory server.
You must add LDAP users to a Client Authentication rule.
Which kind of user group do you need in the Client Authentication rule in R77?

• A.A group with a genetic user
• B.All Users
• C.LDAP group
• D.External-user group

Comment: *

Name: *

Email: *

Verification: *

Jack works for a managed service provider and he has been tasked to create 17 new policies for several new customers. He does not have much time. What is the BEST way to do this with R80 security management?

• A.Create a text-file with mgmt_cli script that creates all objects and policies. Open the file in SmartConsole Command Line to run it.
• B.Create a text-file with Gaia CLI -commands in order to create all objects and policies. Run the file in CLISH with command load configuration.
• C.Create a text-file with DBEDIT script that creates all objects and policies. Run the file in the command line of the management server using command dbedit -f.
• D.Use Object Explorer in SmartConsole to create the objects and Manage Policies from the menu to create the policies.

Correct Answer: A

Explanation
Did you know: mgmt_cli can accept csv files as inputs using the --batch option.
The first row should contain the argument names and the rows below it should hold the values for these parameters.
So an equivalent solution to the powershell script could look like this:
data.csv:

mgmt_cli add host --batch data.csv -u <username> -p <password> -m <management server> This can work with any type of command not just "add host" : simply replace the column names with the ones relevant to the command you need.
References:

Comment: *

Name: *

Email: *

Verification: *

Fill in the blank: Permanent VPN tunnels can be set on all tunnels in the community, on all tunnels for specific gateways, or__________.

• A.On all satellite gateway to satellite gateway tunnels
• B.On specific tunnels for specific gateways
• C.On specific tunnels in the community
• D.On specific satellite gateway to central gateway tunnels

Comment: *

Name: *

Email: *

Verification: *