Pamela is Cyber Security Engineer working for Global Instance Firm with large scale deployment of Check
Point Enterprise Appliances using GAiA/R80.10. Company's Developer Team is having random access issue
to newly deployed Application Server in DMZ's Application Server Farm Tier and blames DMZ Security
Gateway as root cause. The ticket has been created and issue is at Pamela's desk for an investigation. Pamela
decides to use Check Point's Packet Analyzer Tool-fw monitor to iron out the issue during approved
Maintenance window. What do you recommend as the best suggestion for Pamela to make sure she
successfully captures entire traffic in context of Firewall and problematic traffic?

• A.Pamela should check SecureXL status on DMZ Security Gateway and if it's turned OFF. She should
  turn ON SecureXL before using fw monitor to avoid misleading traffic captures.
• B.Pamela should use snoop over fw monitor tool as snoop works at NIC driver level and captures entire
  traffic.
• C.Pamela should use tcpdump over fw monitor tool as tcpdump works at OS-level and captures entire
  traffic.
• D.Pamela should check SecureXL status on DMZ Security gateway and if it's turned ON. She should turn
  OFF SecureXL before using fw monitor to avoid misleading traffic captures.

Comment: *

Name: *

Email: *

Verification: *

Which command collects diagnostic data for analyzing customer setup remotely?

• A.cpinfo
• B.migrate export
• C.sysinfo
• D.cpview

Comment: *

Name: *

Email: *

Verification: *

What is the benefit of Manual NAT over Automatic NAT?

• A.You have the full control about the priority of the NAT rules
• B.If you create a new Security Policy, the Manual NAT rules will be transferred to this new policy.
• C.There is no benefit since Automatic NAT has in any case higher priority over Manual NAT
• D.On IPSO and GAIA Gateways, it is handled in a stateful manner

Comment: *

Name: *

Email: *

Verification: *

Ken wants to obtain a configuration lock from other administrator on R80 Security Management Server. He can do this via WebUI or via CLI.
Which command should he use in CLI? (Choose the correct answer.)

• A.The database feature has two commands lock database override and unlock database. Both will work.
• B.override database lock
• C.remove database lock
• D.The database feature has one command lock database override.

Comment: *

Name: *

Email: *

Verification: *

Which command show the current connection distributed byCoreXL FW instances?

• A.Fw ctl multi state
• B.Fw cti instances -v
• C.Fw cti affinity -I
• D.Fw cti lists

Comment: *

Name: *

Email: *

Verification: *