On the following graphic, you will find layers of policies.

What is a precedence of traffic inspection for the defined polices?

• A.A packet arrives at the gateway, it is checked against the rules in the networks policy layer and then if Implicit Drop Rule drops the packet, it comes next to IPS layer and then after accepting the packet it passes to Threat Prevention layer.
• B.A packet arrives at the gateway, it is checked against the rules in the networks policy layer and then if there is any rule which accepts the packet, it comes next to IPS layer and then after accepting the packet it passes to Threat Prevention layer.
• C.A packet arrives at the gateway, it is checked against the rules in the networks policy layer and then if there is any rule which accepts the packet, it comes next to Threat Prevention layer and then after accepting the packet it passes to IPS layer.
• D.A packet arrives at the gateway, it is checked against the rules in IPS policy layer and then if it is accepted then it comes next to the Network policy layer and then after accepting the packet it passes to Threat Prevention layer.

Comment: *

Name: *

Email: *

Verification: *

What are the three essential components of the Check Point Security Management Architecture?

• A.SmartConsole, Security Management Server, Security Gateway
• B.SmartConsole, SmartUpdate, Security Gateway
• C.Security Management Server, Security Gateway, Command Line Interface
• D.WebUI, SmartConsole, Security Gateway

Correct Answer: A

Explanation/Reference:
Explanation:
Deployments
Basic deployments:
Standalone deployment - Security Gateway and the Security Management server are installed on the

same machine.
Distributed deployment - Security Gateway and the Security Management server are installed on

different machines.

Assume an environment with gateways on different sites. Each Security Gateway connects to the Internet on one side, and to a LAN on the other.
You can create a Virtual Private Network (VPN) between the two Security Gateways, to secure all communication between them.
The Security Management server is installed in the LAN, and is protected by a Security Gateway. The Security Management server manages the Security Gateways and lets remote users connect securely to the corporate network. SmartDashboard can be installed on the Security Management server or another computer.
There can be other OPSEC-partner modules (for example, an Anti-Virus Server) to complete the network security with the Security Management server and its Security Gateways.
Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_SecurityManagement_WebAdminGuide/ html_frameset.htm?topic=documents/R77/CP_R77_SecurityManagement_WebAdminGuide/118037

Comment: *

Name: *

Email: *

Verification: *

Where can you trigger a failover of the cluster members?
1. Log in to Security Gateway CLI and run command clusterXL_admin down.
2. In SmartView Monitor right-click the Security Gateway member and select Cluster member down.
3. Log into Security Gateway CLI and run command cphaprob down.

• A.1, 2, and 3
• B.2 and 3
• C.1 and 2
• D.1 and 3

Correct Answer: C

Explanation
How to Initiate Failover

Comment: *

Name: *

Email: *

Verification: *

Look at the following screenshot and select the BEST answer.

• A.Clients external to the Security Gateway can download archive files from FTP_Ext server using FTP.
• B.Clients external to the Security Gateway can upload any files to the FTP_Ext-server using FTP.
• C.Internal clients can upload and download any-files to FTP_Ext-server using FTP.
• D.Internal clients can upload and download archive-files to FTP_Ext server using FTP.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is TRUE about the Check Point Host object?

• A.When you upgrade to R80 from R77.30 or earlier versions, Check Point Host objects are converted to gateway objects.
• B.Check Point Host is capable of having an IP forwarding mechanism.
• C.Check Point Host has no routing ability even ifit has more than one interface installed.
• D.Check Point Host can act as a firewall.

Comment: *

Name: *

Email: *

Verification: *