Which of the following is NOT an alert option?

• A.SNMP
• B.High alert
• C.Mail
• D.User defined alert

Comment: *

Name: *

Email: *

Verification: *

Which Check Point feature enables application scanning and the detection?

• A.Application Dictionary
• B.AppWiki
• C.Application Library
• D.CPApp

Comment: *

Name: *

Email: *

Verification: *

On the following graphic, you will find layers of policies.

What is a precedence of traffic inspection for the defined polices?

• A.A packet arrives at the gateway, it is checked against the rules in the networks policy layer and then if implicit Drop Rule drops the packet, it comes next to IPS layer and then after accepting the packet it passes to Threat Prevention layer.
• B.A packet arrives at the gateway, it is checked against the rules in the networks policy layer and then if there is any rule which accepts the packet, it comes next to IPS layer and then after accepting the packet it passes to Threat Prevention layer
• C.A packet arrives at the gateway, it is checked against the rules in the networks policy layer and then if there is any rule which accepts the packet, it comes next to Threat Prevention layer and then after accepting the packet it passes to IPS layer.
• D.A packet arrives at the gateway, it is checked against the rules in IPS policy layer and then it comes next to the Network policy layer and then after accepting the packet it passes to Threat Prevention layer.

Correct Answer: B

Explanation/Reference:
Explanation: To simplify Policy management, R80 organizes the policy into Policy Layers. A layer is a set of rules, or a Rule Base.
For example, when you upgrade to R80 from earlier versions:
Gateways that have the Firewall and the Application Control Software Blades enabled will have their

Access Control Policy split into two ordered layers: Network and Applications.
When the gateway matches a rule in a layer, it starts to evaluate the rules in the next layer.
Gateways that have the IPS and Threat Emulation Software Blades enabled will have their Threat

Prevention policies split into two parallel layers: IPS and Threat Prevention.
All layers are evaluated in parallel
Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm?
topic=documents/R80/CP_R80_SecMGMT/126197

Comment: *

Name: *

Email: *

Verification: *

Can multiple administrators connect to a Security Management Server at the same time?

• A.No, only one can be connected
• B.Yes, all administrators can modify a network object at the same time
• C.Yes, every administrator has their own username, and works in a session that is independent of other
  administrators
• D.Yes, but only one has the right to write

Comment: *

Name: *

Email: *

Verification: *

What are the advantages of a "shared policy" in R80?

• A.Allows the administrator to share a policy so that it is available to use in another Policy Package
• B.Allows the administrator to share a policy between all the administrators managing the Security
  Management Server
• C.Allows the administrator to install a policy on one Security Gateway and it gets installed on another
  managed Security Gateway
• D.Allows the administrator to share a policy between all the users identified by the Security Gateway

Comment: *

Name: *

Email: *

Verification: *