Basic Checkpoint Security MCQ

8. How many TCP flags are there in the Checkpoint Security?

3

2

5

8

6

Note: This Question is unanswered, help us to find answer for this one

Check Answer

9. Which SmartConsole application will you use when you want to implement a new security policy for your network?

SmartView Status

SmartView Tracker

SmartDashboard

SmartView Monitor

SmartLSM

Note: This Question is unanswered, help us to find answer for this one

Check Answer

10. Where will you place the Stealth rule in the Rule Base?

At the top

Anywhere

At the bottom

In the middle

Note: This Question is unanswered, help us to find answer for this one

Check Answer

11.

Which feature will you use to manage the different security policies for different gateways when you are managing more than one Enforcement modules from the SmartCenter?

Policy Package Management

Policy Management

Database revision control

Backup tools

Note: This Question is unanswered, help us to find answer for this one

Check Answer

12.

Jeremy has to create 3 site-to-site VPNs. NJ is the central site and the remote sites are Bangalore and Dubai. Bangalore and Dubai can communicate with each other.

Which VPN topologies should he use to achieve it?

Star topology for Banglore and Dubai VPN and Mesh for NJ VPN  

Mesh topology for Banglore and Dubai VPN and Star for NJ VPN 

Mesh topology for Banglore and Dubai VPN and Mesh for NJ VPN

Star topology for Banglore and Dubai VPN and Star for NJ VPN

Note: This Question is unanswered, help us to find answer for this one

Check Answer

13. Which of the following tools can be used to monitor the Packets?

Ethereal

Nessus

TCPDUMP

Snort

Note: This question has more than 1 correct answers

Note: This Question is unanswered, help us to find answer for this one

Check Answer

14. Which command is used to add GUI clients?

cpconfiguration

cpconfig

cputil

add guiclients

Note: This Question is unanswered, help us to find answer for this one

Check Answer

15. The Main mode is completed ___________.

before Phase 1

after Phase 1

before Phase 2

after Phase 2

Note: This Question is unanswered, help us to find answer for this one

Check Answer

16. Which command is used to restore the VPN-1 configuration?

upgrade_restore

upgrade_import

upgrade_export

upgrade_import_restore

Note: This Question is unanswered, help us to find answer for this one

Check Answer

17. Which command is used to know the active policy on the enforcement module?

fw stat

fwm stat

fw statistics

fwm statistics

fw policy name

Note: This Question is unanswered, help us to find answer for this one

Check Answer

18. At which port will you telnet the gateway to use manual client authentication?

258

259

260

18181

Note: This Question is unanswered, help us to find answer for this one

Check Answer

19. Which command in SPALT is used to schedule the backup?

backup schedule

backup --sched

backup --schedule

backup --shd

Note: This Question is unanswered, help us to find answer for this one

Check Answer

20. Which of the following Checkpoint package is installed on the Nokia box?

Checkpoint NGX wrapper

VPN-1 wrapper

IPSO

SecurePlatform

Note: This Question is unanswered, help us to find answer for this one

Check Answer

21. Which SmartConsole application will be used when you want to see which rule is dropping the traffic?

SmartView Status

SmartView Tracker

SmartUpdate

SmartView Monitor

SmartLSM

Note: This Question is unanswered, help us to find answer for this one

Check Answer

22. Which SmartConsole application will Adrian use when he wants to see the CPU utilization and the memory of different gateways being managed from a single SmartCenter server?

SmartView Status

SmartView Tracker

SmartUpdate

SmartView Monitor

SmartLSM

Note: This Question is unanswered, help us to find answer for this one

Check Answer

23. Which command is used to determine the route taken by a packet?

netstat

ipconfig

ifconfig

traceroute

Note: This Question is unanswered, help us to find answer for this one

Check Answer

24. Which protocols can be scanned by the Anti-Virus engine of VPN-1?

POP3

HTTP

SMTP

IMAP

HTTPS

FTP

Note: This question has more than 1 correct answers

Note: This Question is unanswered, help us to find answer for this one

Check Answer

25. Which SmartView application will you use when you want to see the number of connections per application?

SmartView Status

SmartView Tracker

SmartUpdate

SmartView Monitor

SmartLSM

Note: This Question is unanswered, help us to find answer for this one

Check Answer

26. The Quick mode is completed __________.

before Phase 1

after Phase 1

before Phase 2

after Phase 2

Note: This Question is unanswered, help us to find answer for this one

Check Answer

27. Which type of NAT should Adrian use to publish the server when he wants to publish a Web Server so that the external clients may be able to access the application?

Static NAT

Dynamic NAT

Hide NAT

NAT is not required

Note: This Question is unanswered, help us to find answer for this one

Check Answer

28. Which network will Lea add in the VPN domain of ABC Gateway, when she has created a site-to-site VPN tunnel between ABC(172.16.0.0/24)and XYZ(10.1.0.0/24)?

172.16.1.0/24

10.1.0.1/24

172.16.0.0/24

172.16.0.0/16

10.1.1.0/16

Note: This Question is unanswered, help us to find answer for this one

Check Answer

29. Which of the following is the default Smartdirectory (LDAP) profile for Microsoft AD?

AD.Microsoft

AD_Microsoft

Microsoft_AD

Microsoft.AD

Note: This Question is unanswered, help us to find answer for this one

Check Answer

30. Which layer does the IPSec work on?

Session Layer

Data Link Layer

Network Layer

Application Layer

Note: This Question is unanswered, help us to find answer for this one

Check Answer

31. Which SmartConsole application will be used when you want to know how many packets are dropped per gateway?

SmartView Status

SmartView Tracker

SmartUpdate

SmartView Monitor

SmartLSM

Note: This Question is unanswered, help us to find answer for this one

Check Answer

32. In which type of 'attack' does 'packet' have the same sources, IP and port as destination?

SmallPMTU

Teardrop

LAND

Smurfattack

Botnets

Note: This Question is unanswered, help us to find answer for this one

Check Answer

33. Which VPN should be used when you want to allow only specific services to a SecuRemote user?

Traditional mode

Simplified mode

Hybrid mode

Encryption mode

Note: This Question is unanswered, help us to find answer for this one

Check Answer

34. What is the extension of the audit log files?

log

auditlog

alog

adlog

Note: This Question is unanswered, help us to find answer for this one

Check Answer

35. When you are generating Express reports in Eventia Reporter, where will you make queries for the data?

Eventia Database

SmartView Tracker

SmartView Monitor

Local Database

Note: This Question is unanswered, help us to find answer for this one

Check Answer

36. How many keys are there in PKI (Public Key Infrastructure)?

1

2

3

4

Note: This Question is unanswered, help us to find answer for this one

Check Answer

37. Which Checkpoint applications are supported by SPLAT?

VPN-Pro

SmartCenter

Smart Clients

Eventia Reporter

Note: This question has more than 1 correct answers

Note: This Question is unanswered, help us to find answer for this one

Check Answer

38. What is the function of DShield Storm Center in Checkpoint Security?

It is a Hacking center

It correlates world wide traffic profiles to detect attacks

It is a DoS attack center

Note: This Question is unanswered, help us to find answer for this one

Check Answer

39. How many administrators can be defined while installing the VPN-1 NGX?

1

2

3

4

None

Note: This Question is unanswered, help us to find answer for this one

Check Answer

40. Which command is used to inspect the translation tables?

fw monitor

fwm monitor

fw mon

fwm mon

Note: This Question is unanswered, help us to find answer for this one

Check Answer

41.

 Which SmartView application will you use when your manager asks you to generate a report containing the number of bytes transferred per IP address in your network during the last month?

SmartView Status

SmartView Tracker

SmartUpdate

SmartView Monitor

Eventia Reporter 

Note: This Question is unanswered, help us to find answer for this one

Check Answer

42. Which of the following Checkpoint components require/s license?

VPN-1

SmartDefence

LDAP

SmartView Monitor

Note: This question has more than 1 correct answers

Note: This Question is unanswered, help us to find answer for this one

Check Answer

43. You want to see the logs for rule number 10. What could be the reason for not being able to see any logs in the SmartView Tracker?

Logging is not enabled in Global Properties

Logging is not enabled in Checkpoint Object

Checking the logs in SmartView Monitor

Logging is not enabled in rule number 10

Note: This Question is unanswered, help us to find answer for this one

Check Answer

44. Which command is used to check the routing information in SPLAT?

Show IP route

Show routing table

netstat -nr

cpstat

Note: This Question is unanswered, help us to find answer for this one

Check Answer

45. What happens when you check the option 'Use Aggressive Mode'?

The 6-packet IKE Phase 2 is replaced by the 3-packet exchange

Nothing happens

The 3-packet IKE Phase 1 is replaced by the 1-packet exchange

The 6-packet IKE Phase 1 is replaced by the 3-packet exchange

Note: This Question is unanswered, help us to find answer for this one

Check Answer

46. Which command is used to troubleshoot the VPN?

vpn ike

vpn tu

vpn

vpn securemote

Note: This Question is unanswered, help us to find answer for this one

Check Answer

47. How can you create a new Database Revision Control version?

By selecting the option in Policy Package Management

By selecting the option in Global properties

By selecting the option after pushing the policy

By selecting the option before pushing the policy

Note: This Question is unanswered, help us to find answer for this one

Check Answer

48. Which port on Firewall should be opened for IPSec NAT-Traversal?

UDP 4500

TCP 4500

UDP 500

TCP 500

UDP 1818

Note: This Question is unanswered, help us to find answer for this one

Check Answer

49. Which port CVP security server is used for communication?

18181

18182

18921

18891

18291

Note: This Question is unanswered, help us to find answer for this one

Check Answer

50. Which of the following OS is not supported by VPN-1 SecuRemote?

Windows XP

RedHat Linux 9

MacOS X

IPSO 4.0

Note: This Question is unanswered, help us to find answer for this one

Check Answer

51. Which OPSEC server will allow you to export the log files to the third party?

CVP

UFP

ELA

LEA

Note: This Question is unanswered, help us to find answer for this one

Check Answer

52. At which port can you access the WUI of SPLAT?

80

443

18181

18110

8080

Note: This Question is unanswered, help us to find answer for this one

Check Answer

53. Which port on Firewall should be opened for IPSec IKE?

UDP 4500

TCP 4500

UDP 500

TCP 500

UDP 1818

Note: This Question is unanswered, help us to find answer for this one

Check Answer

54. How will you create a RADIUS server for authentication in VPN-1?

File->New->RADIUS server

Manage->Servers and OPSEC applications->New->RADIUS

New->RADIUS Server

Right click server->New RADIUS server

Object->RADIUS server

Note: This Question is unanswered, help us to find answer for this one

Check Answer

55. In which mode are the rules created automatically while configuring the VPN?

Hybrid Mode

None

Traditional Mode

Simplified Mode

Note: This Question is unanswered, help us to find answer for this one

Check Answer

56. Which SmartView application will you use when you want to view the OS details and the Installed Package details?

SmartView Status

SmartView Tracker

SmartUpdate

SmartView Monitor

SmartLSM

Note: This Question is unanswered, help us to find answer for this one

Check Answer

57. What is VTI?

VPN Tunnel Interface

Virtual Tunnel Interface

VPN Terminating Interface

Virtual Terminating Interface

Note: This Question is unanswered, help us to find answer for this one

Check Answer

58. How many NAT entries are created for automatic host/network object NAT?

1

2

3

None

Note: This Question is unanswered, help us to find answer for this one

Check Answer

59.

Eric wants that a VPN rule should only be activated for a particular time.

How can that be done?

By specifying the time VPN object settings

By specifying the time in global settings  

By specifying the time in VPN rule 

Note: This Question is unanswered, help us to find answer for this one

Check Answer

60. Which SmartView application will you use when you want to see the concurrent number of connections?

SmartView Status

SmartView Tracker

SmartUpdate

SmartView Monitor

SmartLSM

Note: This Question is unanswered, help us to find answer for this one

Check Answer

61. What is the significance of SIC?

It is used for secure communication between two gateways

It is used for secure communication between a gateway and SmartCenter server

It is used for authentication

It is used for encryption in the VPN tunnels

Note: This Question is unanswered, help us to find answer for this one

Check Answer

62. Which of the following authenticated services can work with User-authentication?

telnet

https

rlogin

http

ftp

Note: This question has more than 1 correct answers

Note: This Question is unanswered, help us to find answer for this one

Check Answer

63. After how much time does the Firewall Module send the logs to the Log Server?

Instantly

After 1 second

After 0.5 second

After 2 seconds

After 3 seconds

Note: This Question is unanswered, help us to find answer for this one

Check Answer

64. How many log files can be opened at a time in the Smartview Tracker?

1

2

3

4

5

Note: This Question is unanswered, help us to find answer for this one

Check Answer

65. Which command is used to configure the SPLAT operating system?

ConUtilities

CPutil

CPconfig

Sysconfig

Note: This Question is unanswered, help us to find answer for this one

Check Answer

66. Which SmartView application will Eric use when he wants to see the number of Remote user tunnels?

SmartView Status

SmartView Tracker

SmartUpdate

SmartView Monitor

SmartLSM

Note: This Question is unanswered, help us to find answer for this one

Check Answer

67. Which one of the following is used to edit the Log file size switch settings?

SmartView Status

SmartView Tracker

Checkpoint Gateway-->Logs and Masters

Global policies-->Logs and Masters

SmartLSM

Note: This Question is unanswered, help us to find answer for this one

Check Answer

68. Which are the different modes in High-Availability (HA)?

Active-Active

Active-Deactive

Active-Passive

Passive-Passive

Deactive-Passive

Note: This question has more than 1 correct answers

Note: This Question is unanswered, help us to find answer for this one

Check Answer

69. Which command is used to check the VPN-1 version on Gateway?

fw ver

fwmver

fwm version

fwm ver

Note: This Question is unanswered, help us to find answer for this one

Check Answer

70. Which of the following are Security servers?

URI

SMTP

FTP

TCP

CIFS

Note: This question has more than 1 correct answers

Note: This Question is unanswered, help us to find answer for this one

Check Answer

71.

What rule will Mary create in the rule base to implement the authentication when she wants to implement client authentication for an Internet_User Group for HTTP service?

Source:Internet_Users@Any; Dest:Any ; Service:HTTP ; Action:Client Authentication

Source:Internet_Users@Any; Dest:Any ; Service:Telnet; Action:Client Authentication

Source:Internet_Users@Any; Dest:Any ; Service:HTTP ; Action:Session Authentication.

Source:Internet_Users@Any; Dest:Any ; Service:HTTP ; Action:User Authentication

Note: This Question is unanswered, help us to find answer for this one

Check Answer

72. Which of the following tools can be used for vulnerabilities?

Ethereal

Nessus

TCPDUMP

Snort

Note: This Question is unanswered, help us to find answer for this one

Check Answer

73.

The HTTP access is opened to one new system in the network.

When will a rule become effective in such a situation?

While installing the policy 

During cpstop

During cpstart

During cprestart

By saving the policy on SmartCenter server

Note: This Question is unanswered, help us to find answer for this one

Check Answer

74. Which command is used to show the Multicast Routing table?

show ip route

show multicast table

show ip mroute

show ipm route

Note: This Question is unanswered, help us to find answer for this one

Check Answer

75. Which application will Jenny use when she wants to apply security policies on the remote users while they connect their systems from home?

SecuRemote

SecureClient

SmartLSM

Enforcement Module

Note: This Question is unanswered, help us to find answer for this one

Check Answer

76. Where will you place the Cleanup Rule in the Rule Base?

At the top

Anywhere

At the bottom

In the middle

Note: This Question is unanswered, help us to find answer for this one

Check Answer

77.

What sequence is followed in the Rule Base Enforcement in VPN-1?

1. Security policy BEFORE-LAST rule

2. Administrator-defined rule base

3. IP Spoofing/IP options

4. Cleanup rule

5. Security Policy FIRST rule

6. NAT

156324 

632541 

125463 

125346 

365214 

Note: This Question is unanswered, help us to find answer for this one

Check Answer

78. Which command in Cluster is used to see the Active Member?

cphaprob stat

cphaprob list

cpha prob stat

cpha prob list

Note: This Question is unanswered, help us to find answer for this one

Check Answer

79. Which command will Eric use to fetch a policy from the SmartCenter server when he is unable to access it?

fw install policy

fw fetchpolicy

fwm fetch

fw fetch

Note: This Question is unanswered, help us to find answer for this one

Check Answer

80. Which SmartConsole application is used to manage the VPN-1 license?

Smart Update

Smart View Tracker

Smart View Status

Smart View Monitor

Smart LSM

Note: This Question is unanswered, help us to find answer for this one

Check Answer