What will be the effect of running the following command on the Security Management Server?

• A.Reset SIC on all gateways.
• B.Remove the local ACL lists.
• C.No effect.
• D.Remove the installed Security Policy.

Comment: *

Name: *

Email: *

Verification: *

You have used the SmartEvent GUI to create a custom Event policy. What is the best way to display the correlated Events generated by SmartEvent Policies?

• A.Open SmartView Monitor and select the SmartEvent Window from the main menu.
• B.In the SmartConsole / Logs & Monitor --> open the Logs View and use type:Correlated as query filter.
• C.In the SmartConsole / Logs & Monitor -> open a new Tab and select External Apps / SmartEvent.
• D.Select the Events tab in the SmartEvent GUI or use the Events tab in the SmartView web interface.

Comment: *

Name: *

Email: *

Verification: *

In a Client to Server scenario, which inspection point is the first point immediately following the tables and rule base check of a packet coming from outside of the network?

• A.Little o
• B.Big O
• C.Big l
• D.Little i

Comment: *

Name: *

Email: *

Verification: *

Pamela is Cyber Security Engineer working for Global Instance Firm with large scale deployment of Check Point Enterprise Appliances using GAiA/R81.10. Company's Developer Team is having random access issue to newly deployed Application Server in DMZ's Application Server Farm Tier and blames DMZ Security Gateway as root cause. The ticket has been created and issue is at Pamela's desk for an investigation. Pamela decides to use Check Point's Packet Analyzer Tool-fw monitor to iron out the issue during approved Maintenance window.
What do you recommend as the best suggestion for Pamela to make sure she successfully captures entire traffic in context of Firewall and problematic traffic?

• A.Pamela should use snoop over fw monitor tool as snoop works at NIC driver level and captures entire traffic.
• B.Pamela should check SecureXL status on DMZ Security gateway and if it's turned ON. She should turn OFF SecureXL before using fw monitor to avoid misleading traffic captures.
• C.Pamela should use tcpdump over fw monitor tool as tcpdump works at OS-level and captures entire traffic.
• D.Pamela should check SecureXL status on DMZ Security Gateway and if it's turned OFF. She should turn ON SecureXL before using fw monitor to avoid misleading traffic captures.

Comment: *

Name: *

Email: *

Verification: *

How would you enable VMAC Mode in ClusterXL?

• A.Cluster Object -> Edit -> ClusterXL and VRRP -> Use Virtual MAC
• B.fw ctl set int vmac_mode 1
• C.cphaconf vmac_mode set 1
• D.Cluster Object -> Edit -> Cluster Members -> Edit -> Use Virtual MAC

Comment: *

Name: *

Email: *

Verification: *