Exam- CCSA Certification Exam with Complete Solutions
Why is a Central License the preferred and recommended method of licensing?
A. Central Licensing is actually not supported with Gaia.
B. Central Licensing is the only option when deploying Gaia
C. Central Licensing ties to the IP address of a gateway and can be changed to any gateway if
needed.
D. Central Licensing ties to the IP address of the management server and is not dependent on
the IP of any gateway in the event it changes. Correct-D
When enabling tracking on a rule, what is the default option?
A. Accounting Log
B. Extended Log
C. Log
D. Detailed Log Correct-C
Gaia includes Check Point Upgrade Service Engine (CPUSE), which can directly receive updates
for what components?
A. The Security Gateway (SG) and Security Management Server (SMS) software and the CPUSE
engine.
, Exam- CCSA Certification Exam with Complete Solutions
B. Licensed Check Point products for the Gala operating system and the Gaia operating system
itself.
C. The CPUSE engine and the Gaia operating system.
D. The Gaia operating system only. Correct-B
Name the file that is an electronically signed file used by Check Point to translate the features
in the license into a code?
A. Both License (.lic) and Contract (.xml) files
B. cp.macro
C. Contract file (.xml)
D. license File (.lie) Correct-B
Fill in the blank: When LDAP is integrated with Check Point Security Management, it is then
referred to as _______.
A. User Center
B. User Administration
C. User Directory
D. UserCheck Correct-C
,Exam- CCSA Certification Exam with Complete Solutions
Can you use the same layer in multiple policies or rulebases?
A. Yes - a layer can be shared with multiple policies and rules.
B. No - each layer must be unique.
C. No - layers cannot be shared or reused, but an identical one can be created.
D. Yes - but it must be copied and pasted with a different name. Correct-A
Tom has connected to the Management Server remotely using SmartConsole and is in the
process of making some Rule Base changes, when he suddenly loses connectivity.
Connectivity is restored shortly afterward. What will happen to the changes already made?
A. Tom will have to reboot his SmartConsole computer, clear the cache, and restore changes.
B. Tom will have to reboot his SmartConsole computer, and access the Management cache
store on that computer, which is only accessible after a reboot.
C. Tom's changes will be lost since he lost connectivity and he will have to start again.
D. Tom's changes will have been stored on the Management when he reconnects and he will
not lose any of his work. Correct-D
Security Gateway software blades must be attached to what?
, Exam- CCSA Certification Exam with Complete Solutions
A. Security Gateway
B. Security Gateway container
C. Management server
D. Management container Correct-A
Which tool allows you to monitor the top bandwidth on smart console?
A. Logs & Monitoring
B. Smart Event
C. Gateways & Severs Tab
D. SmartView Monitor Correct-D
A security zone is a group of one or more network interfaces from different centrally managed
gateways. What is considered part of the zone?
A. The zone is based on the network topology and determined according to where the
interface leads to.
B. Security Zones are not supported by Check Point firewalls.
C. The firewall rule can be configured to include one or more subnets in a zone.
Why is a Central License the preferred and recommended method of licensing?
A. Central Licensing is actually not supported with Gaia.
B. Central Licensing is the only option when deploying Gaia
C. Central Licensing ties to the IP address of a gateway and can be changed to any gateway if
needed.
D. Central Licensing ties to the IP address of the management server and is not dependent on
the IP of any gateway in the event it changes. Correct-D
When enabling tracking on a rule, what is the default option?
A. Accounting Log
B. Extended Log
C. Log
D. Detailed Log Correct-C
Gaia includes Check Point Upgrade Service Engine (CPUSE), which can directly receive updates
for what components?
A. The Security Gateway (SG) and Security Management Server (SMS) software and the CPUSE
engine.
, Exam- CCSA Certification Exam with Complete Solutions
B. Licensed Check Point products for the Gala operating system and the Gaia operating system
itself.
C. The CPUSE engine and the Gaia operating system.
D. The Gaia operating system only. Correct-B
Name the file that is an electronically signed file used by Check Point to translate the features
in the license into a code?
A. Both License (.lic) and Contract (.xml) files
B. cp.macro
C. Contract file (.xml)
D. license File (.lie) Correct-B
Fill in the blank: When LDAP is integrated with Check Point Security Management, it is then
referred to as _______.
A. User Center
B. User Administration
C. User Directory
D. UserCheck Correct-C
,Exam- CCSA Certification Exam with Complete Solutions
Can you use the same layer in multiple policies or rulebases?
A. Yes - a layer can be shared with multiple policies and rules.
B. No - each layer must be unique.
C. No - layers cannot be shared or reused, but an identical one can be created.
D. Yes - but it must be copied and pasted with a different name. Correct-A
Tom has connected to the Management Server remotely using SmartConsole and is in the
process of making some Rule Base changes, when he suddenly loses connectivity.
Connectivity is restored shortly afterward. What will happen to the changes already made?
A. Tom will have to reboot his SmartConsole computer, clear the cache, and restore changes.
B. Tom will have to reboot his SmartConsole computer, and access the Management cache
store on that computer, which is only accessible after a reboot.
C. Tom's changes will be lost since he lost connectivity and he will have to start again.
D. Tom's changes will have been stored on the Management when he reconnects and he will
not lose any of his work. Correct-D
Security Gateway software blades must be attached to what?
, Exam- CCSA Certification Exam with Complete Solutions
A. Security Gateway
B. Security Gateway container
C. Management server
D. Management container Correct-A
Which tool allows you to monitor the top bandwidth on smart console?
A. Logs & Monitoring
B. Smart Event
C. Gateways & Severs Tab
D. SmartView Monitor Correct-D
A security zone is a group of one or more network interfaces from different centrally managed
gateways. What is considered part of the zone?
A. The zone is based on the network topology and determined according to where the
interface leads to.
B. Security Zones are not supported by Check Point firewalls.
C. The firewall rule can be configured to include one or more subnets in a zone.
