Jack works for a managed service provider and he has been tasked to create 17 new policies for several new customers. He does not have much time. What is the BEST way to do this with R80 security management?

• A.Create a text-file with mgmt_cliscript that creates all objects and policies. Open the file in SmartConsole Command Line to run it.
• B.Create a text-file with Gaia CLI -commands in order to create all objects and policies. Run the file in CLISH with command load configuration.
• C.Create a text-file with DBEDIT script that creates all objects and policies. Run the file in the command line of the management server using command dbedit -f.
• D.Use Object Explorer in SmartConsole to create the objects and Manage Policies from the menu to create the policies.

Correct Answer: A

Explanation/Reference:
Explanation: Did you know: mgmt_cli can accept csv files as inputs using the --batch option.
The first row should contain the argument names and the rows below it should hold the values for these parameters.
So an equivalent solution to the powershell script could look like this:
data.csv:

mgmt_cli add host --batch data.csv -u <username> -p <password> -m <management server> This can work with any type of command not just "add host" : simply replace the column names with the ones relevant to the command you need.
Reference: https://community.checkpoint.com/thread/1342
https://sc1.checkpoint.com/documents/R80/APIs/#gui-cli/add-access-rule

Comment: *

Name: *

Email: *

Verification: *

Look at the following screenshot and select the BEST answer.

• A.Internal clients can upload and download archive-files to FTP_Ext server using FTP.
• B.Clients external to the Security Gateway can upload any files to the FTP_Ext-server using FTP.
• C.Clients external to the Security Gateway can download archive files from FTP_Ext server using FTP.
• D.Internal clients can upload and download any-files to FTP_Ext-server using FTP.

Comment: *

Name: *

Email: *

Verification: *

You are going to upgrade from R77 to R80. Before the upgrade, you want to back up the system so that, if there are any problems, you can easily restore to the old version with all configuration and management files intact. What is the BEST backup method in this scenario?

• A.backup
• B.Database Revision
• C.snapshot
• D.migrate export

Comment: *

Name: *

Email: *

Verification: *

After the initial installation on Check Point appliance, you notice that the Management interface and default gateway are incorrect. Which commands could you use to set the IP to 192.168.80.200/24 and default gateway to 192.168.80.1.

• A.set interface Mgmt ipv4-address 192.168.80.200 mask-length 24
  set static-route default nexthop gateway address 192.168.80.1 on
  save config
• B.add interface Mgmt ipv4-address 192.168.80.200 255.255.255.0
  add static-route 0.0.0.0.0.0.0.0 gw 192.168.80.1 on
  save config
• C.set interface Mgmt ipv4-address 192.168.80.200 255.255.255.0
  add static-route 0.0.0.0.0.0.0.0 gw 192.168.80.1 on
  save config
• D.add interface Mgmt ipv4-address 192.168.80.200 mask-length 24
  add static-route default nexthop gateway address 192.168.80.1 on
  save config

Comment: *

Name: *

Email: *

Verification: *

You want to establish a VPN, using certificates. Your VPN will exchange certificates with an external partner.
Which of the following activities sh you do first?

• A.Create a new logical-server object to represent your partner's CA
• B.Exchange exported CA keys and use them to create a new server object to represent your partner's Certificate Authority (CA)
• C.Manually import your partner's Certificate Revocation List.
• D.Manually import your partner's Access Control List.

Comment: *

Name: *

Email: *

Verification: *