Free Check Point Certified Security Administrator 156-215.80 Exam Practice Test

To view the policy installation history for each gateway, which tool would an administrator use?

• Revisions
• Gateway installations
• Installation history
• Gateway history

There are two R77.30 Security Gateways in the Firewall Cluster. They are named FW_A and FW_B. The cluster is configured to work as HA (High availability) with default cluster configuration. FW_A is configured to have higher priority than FW_B. FW_A was active and processing the traffic in the morning. FW_B was standby. Around 1100 am, its interfaces went down and this caused a failover. FW_B became active. After an hour, FW_A's interface issues were resolved and it became operational. When it re-joins the cluster, will it become active automatically?

• No, since ''maintain current active cluster member'' option on the cluster object properties is enabled by default
• No, since ''maintain current active cluster member'' option is enabled by default on the Global Properties
• Yes, since ''Switch to higher priority cluster member'' option on the cluster object properties is enabled by default
• Yes, since ''Switch to higher priority cluster member'' option is enabled by default on the Global Properties

Sally has a Hot Fix Accumulator (HFA) she wants to install on her Security Gateway which operates with GAiA, but she cannot SCP the HFA to the system. She can SSH into the Security Gateway, but she has never been able to SCP files to it. What would be the most likely reason she cannot do so?

• She needs to edit /etc/SSHd/SSHd_config and add the Standard Mode account.
• She needs to run sysconfig and restart the SSH process.
• She needs to edit /etc/scpusers and add the Standard Mode account.
• She needs to run cpconfig to enable the ability to SCP files.

To fully enable Dynamic Dispatcher on a Security Gateway:

• run fw ctl multik set_mode 9 in Expert mode and then reboot
• Using cpconfig, update the Dynamic Dispatcher value to ''full'' under the CoreXL menu
• Edit /proc/interrupts to include multik set_mode 1 at the bottom of the file, save, and reboot
• run fw ctl multik set_mode 1 in Expert mode and then reboot

Which of the following methods can be used to update the trusted log server regarding the policy and configuration changes performed on the Security Management Server?

• Save Policy
• Install Database
• Save session
• Install Policy

Which command is used to obtain the configuration lock in Gaia?

• Lock database override
• Unlock database override
• Unlock database lock
• Lock database user

What is the BEST method to deploy Identity Awareness for roaming users?

• Use Office Mode
• Use identity agents
• Share user identities between gateways
• Use captive portal

You have configured SNX on the Security Gateway. The client connects to the Security Gateway and the user enters the authentication credentials. What must happen after authentication that allows the client to connect to the Security Gateway's VPN domain?

• SNX modifies the routing table to forward VPN traffic to the Security Gateway.
• An office mode address must be obtained by the client.
• The SNX client application must be installed on the client.
• Active-X must be allowed on the client.

You have successfully backed up your Check Point configurations without the OS information. What command would you use to restore this backup?

• restore_backup
• import backup
• cp_merge
• migrate import

Which of the below is the MOST correct process to reset SIC from SmartDashboard?

• Run cpconfig, and click Reset.
• Click the Communication button for the firewall object, then click Reset. Run cpconfig on the gateway and type a new activation key.
• Run cpconfig, and select Secure Internal Communication > Change One Time Password.
• Click Communication > Reset on the Gateway object, and type a new activation key.