Exam (elaborations) CCSA

Of the three mechanisms Check Point uses for controlling traffic, which enables firewalls to incorporate layer 4 awareness in packet inspection?️️ C. Stateful Inspection Which of the following statements about Bridge mode is TRUE? A. When managing a Security Gateway in Bridge mode, it is possible to use a bridge interface for Network Address Translation. B. Assuming a new installation, bridge mode requires changing the existing IP routing of the network. C. All ClusterXL modes are supported. D. A bridge must be configured with a pair of interfaces.️️ D. A bridge must be configured with a pair of interfaces. Which SmartConsole component can Administrators use to track remote administrative activities?️️ D. SmartView Tracker Which of the following statements is TRUE about management plug-ins? A. The plug-in is a package installed on the Security Gateway. B. A management plug-in interacts with a Security Management Server to provide new features and support for new products. C. Using a plug-in offers full central management only if special licensing is applied to specific features of the plug-in. D. Installing a management plug-in is just like an upgrade process. (It overwrites existing components.)️️ B. A management plug-in interacts with a Security Management Server to provide new features and support for new products. UDP packets are delivered if they are _________.️️ A. A legal response to an allowed request on the inverse UDP ports and IP The Check Point Security Gateway's virtual machine (kernel) exists between which two layers of the OSI model?️️ D. Network and Datalink layers The customer has a small Check Point installation, which includes one Linux Enterprise 3.0 server working as the SmartConsole, and a second server running Windows 2003 as both Security Management Server running Windows 2003 as both Security Management Server and Security Gateway. This is an example of a(n).️️ D. Unsupported configuration The customer has a small Check Point installation which includes one Windows 2003 server as the SmartConsole and a second server running SecurePlatform as both Security Management Server and the Security Gateway. This is an example of a(n):️️ D. Stand-Alone Installation The customer has a small Check Point installation which includes one Windows XP workstation as the SmartConsole, one Solaris server working as Security Management Server, and a third server running SecurePlatform as Security Gateway. This is an example of a(n):️️ C. Distributed Installation. The customer has a small Check Point installation which includes one Windows 2003 server as SmartConsole and Security Management Server with a second server running SecurePlatform as Security Gateway. This is an example of a(n):️️ C. Distributed Installation. When doing a Stand-Alone Installation, you would install the Security Management Server with which other Check Point architecture component?️️ B. Security Gateway You are a security architect and need to design a secure firewall, VPN and IPS solution. Where would be the best place to install IPS in the topology if the internal network is already protected?️️ A. On the firewall itself to protect all connected networks centrally. You are installing a Security Management Server. Your security plan calls for three administrators for this particular server. How many can you create during installation?️️ C. One During which step in the installation process is it necessary to note the fingerprint for first-time verification?️️ B. When configuring the Security Management Server using cpconfig How can you most quickly reset Secure Internal Communications (SIC) between a Security Management Server and Security Gateway?️️ C. From cpconfig on the Gateway, choose the Secure Internal Communication option and retype the activation key. Next, retype the same key in the Gateway object in SmartDashboard and