Your manager requires you to setup a VPN to a new business partner site. The administrator from the partner
site gives you his VPN settings and you notice that he setup AES 128 for IKE phase 1 and AES 256 for IKE
phase 2. Why is this a problematic setup?

• A.The two algorithms do not have the same key length and so don't work together. You will get the error
  ... No proposal chosen...
• B.All is fine and can be used as is.
• C.Only 128 bit keys are used for phase 1 keys which are protecting phase 2, so the longer key length in
  phase 2 only costs performance and does not add security due to a shorter key in phase 1.
• D.All is fine as the longest key length has been chosen for encrypting the data and a shorter key length for
  higher performance for setting up the tunnel.

Comment: *

Name: *

Email: *

Verification: *

Which option would allow you to make a backup copy of the OS and Check Point configuration, without stopping Check Point processes?

• A.All options stop Check Point processes
• B.backup
• C.migrate export
• D.snapshot

Comment: *

Name: *

Email: *

Verification: *

Provide very wide coverage for all products and protocols, with noticeable performance impact.

How could you tune the profile in order to lower the CPU load still maintaining security at good level?
Select the BEST answer.

• A.Set the Performance Impact to Medium or lower.
• B.The problem is not with the Threat Prevention Profile. Consider adding more memory to the appliance.
• C.Set the Performance Impact to Very Low Confidence to Prevent.
• D.Set High Confidence to Low and Low Confidence to Inactive.

Comment: *

Name: *

Email: *

Verification: *

You are going to upgrade from R77 to R80. Before the upgrade, you want to back up the system so that, if there are any problems, you can easily restore to the old version with all configuration and management files intact. What is the BEST backup method in this scenario?

• A.backup
• B.Database Revision
• C.snapshot
• D.migrate export

Comment: *

Name: *

Email: *

Verification: *

The Firewall kernel is replicated multiple times, therefore:

• A.The Firewall can run different policies per core
• B.The Firewall kernel is replicated only with new connections and deletes itself once the connection times out
• C.The Firewall kernel only touches the packet if the connection is accelerated
• D.The Firewall can run the same policy on all cores

Comment: *

Name: *

Email: *

Verification: *