What are possible Automatic Reactions in SmartEvent?
Correct Answer: A
Explanation The possible Automatic Reactions in SmartEvent are Mail, SNMP Trap, Block Source, Block Event Activity, and External Script1. Automatic Reactions are actions that SmartEvent can perform automatically when a specific event occurs2. They can help you respond quickly and efficiently to security incidents and threats2. The Automatic Reactions are1: Mail: This reaction sends an email notification to a specified recipient with the details of the event. You can customize the subject and the body of the email, and use variables to include relevant information. SNMP Trap: This reaction sends an SNMP trap to a specified SNMP server with the details of the event. You can customize the OID and the community string of the trap, and use variables to include relevant information. Block Source: This reaction blocks the source IP address of the event from accessing your network for a specified duration. You can choose to block the source on all gateways or on specific gateways. You can also choose to block the source on a specific port or service. Block Event Activity: This reaction blocks the specific activity that triggered the event from occurring again for a specified duration. You can choose to block the activity on all gateways or on specific gateways. You can also choose to block the activity on a specific port or service. External Script: This reaction runs an external script on a specified server with the details of the event as arguments. You can use any script that can be executed by the operating system of the server, such as bash, perl, python, etc. You can use variables to include relevant information in the script arguments. References: SmartEvent R81.20 Administration Guide - Check Point Software, SmartEvent - Check Point Software
Question 362
Alice & Bob are going to deploy Management Data Plane Separation (MDPS) for all their Check Point Security Gateway(s)/Cluster(s). Which of the following statement is true?
Correct Answer: B
Explanation Management Data Plane Separation (MDPS) is a feature that allows the separation of the management plane and the data plane on a Security Gateway or a cluster. The management plane is responsible for accessing, provisioning and monitoring the Security Gateway, while the data plane is responsible for all other network traffic and processing. Each network environment is independent and includes interfaces, routes, sockets, and processes1. References: Check Point R81 Administration Guide
Question 363
Fill in the blank: A ________ VPN deployment is used to provide remote users with secure access to internal corporate resources by authenticating the user through an internet browser.
Correct Answer: A
Question 364
SmartConsole R81 requires the following ports to be open for SmartEvent R81 management:
Correct Answer: D
Explanation To use SmartConsole R81 for managing SmartEvent R81, you need to have the following ports open: Port 19009 for communication over HTTPS (443) Port 19009 for communication over HTTP (80) These ports are necessary for the SmartConsole to communicate with SmartEvent for management and monitoring purposes. References: Check Point Certified Security Expert R81 documentation and learning resources.
Question 365
Which of the following Central Deployment is NOT a limitation in R81.10 SmartConsole?
Correct Answer: A
Explanation Security Gateway Clusters in Load Sharing mode are not supported by the Central Deployment feature in R81.10 SmartConsole. According to the Check Point R81.10 Known Limitations article1, Central Deployment in SmartConsole does not support: Connection from SmartConsole Client to the Management Server through a proxy server. In this case, use the applicable API command ClusterXL in Load Sharing mode VRRP Cluster Installation of a package on a VSX VSLS Cluster that contains more than 3 members. On Multi-Domain Servers: Global Domain, or the MDS context Standalone server Standby Security Management Server or Multi-Domain Security Management Scalable Platforms 40000 / 60000 SMB Appliances The other options are supported by the Central Deployment feature in R81.10 SmartConsole. Dedicated Log Server, Dedicated SmartEvent Server, and Security Gateways/Clusters in ClusterXL HA new mode can be selected as targets for installing packages using the Central Deployment wizard.
