CheckPoint Check Point Certified Security Expert - R82 Sample Questions:
1. What feature is provided by the SMO?
A) The SMO can automatically add or remove the node out of the ClusterXL cluster without administrator intervention.
B) The SMO provides a range of IP addresses which are dynamically assigned to the Cluster nodes.
C) The SMO maintains a list of ports dynamically assigned to the Cluster nodes to communicate with the Management Server.
D) The SMO provides a single IP address for use in management communication and policy installation, simplifying the management process.
2. To form a tunnel, IKEv2 uses two exchange types: IKE_SA_INIT and IKE_AUTH. How many packets are transferred between the VPN peer gateways during the two exchanges?
A) 9 packets unless legacy peers are included in the VPN community, which uses only 6 packets, 3 per exchange.
B) Each exchange involves two messages, making a total of 4 packets.
C) For a Site-to-Site VPN on Check Point using IKEv2, the normal exchange is 9 packets.
D) 6 packets. There are 4 in the SA_INIT exchange because of the Diffie-Hellman process.
3. To which directory does CPTA transfer policy files on the Security Gateway?
A) $FWDIR/state/_tmp/FW1
B) $CPDIR/state/tmp/FW1
C) $FWDIR/state/local/FW1
D) $FWDIR/state_tmp/FW1
4. Which tool can be used to automate upgrades and Hotfix installations?
A) CDT
B) CPUSE
C) DA
D) API
5. What is Collision Mode in Management HA?
A) This situation is with two Management Servers: both set as Standby.
B) This situation is with two Management Servers: both set as Active.
C) This situation is with two Management Servers: the first set as Active and the second set as Standby.
D) This situation is with three Management Servers: the first set as Active and the second and third set as Standby.
Solutions:
| Question # 1 Answer: D | Question # 2 Answer: B | Question # 3 Answer: A | Question # 4 Answer: A | Question # 5 Answer: B |

We're so confident of our products that we provide no hassle product exchange.


By Matthew


