CCSA Checkpoint Test Questions
and Answers All Correct
A network administrator has informed you that they have identified a malicious host on
the network, and instructed you to block it. Corporate policy dictates that firewall policy
changes cannot be made at this time. What tool can you use to block this traffic? -
Answer-Anti-Malware protection
The default shell of the Gaia CLI is cli.sh. How do you change from the cli.sh shell to the
advanced shell to run Linux commands? - Answer-Execute the command 'expert' in the
cli.sh shell
Where can administrator edit a list of trusted SmartConsole clients? - Answer-In
cpconfig on a Security Management Server, in the WebUI logged into a Security
Management Server, in SmartConsole: Manage and Settings > Permissions and
Administrators > Advanced > Trusted Clients.
In which deployment is the security management server and Security Gateway installed
on the same appliance? - Answer-Standalone
When dealing with rule base layers, what two layer types can be utilized? - Answer-
Inbound Layers and Outbound Layers
How can the changes made by an administrator before publishing the session be seen
by a Super User administrator? - Answer-From the SmartView Tracker audit log.
What are the three main components of Check Point security management
architecture? - Answer-SmartConsole, Security Management, and Security Gateway
What is the main objective when using Application Control? - Answer-To filter out
specific content.
What command from the CLI would be used to view current licensing? - Answer-show
license -s
In order for changes made to policy to be enforced by a Security Gateway, what action
must an administrator perform? - Answer-Install policy
, The Gateway Status view in SmartConsole shows the overall status of Security
Gateways and Software Blades. What does the Status Attention mean? - Answer-At
least one Software Blade has a minor issue, but the gateway works.
Which of the following is NOT an authentication scheme used for accounts created
through SmartConsole? - Answer-Security questions
Which of the following is NOT a component of a Distinguished Name? - Answer-User
container
In SmartConsole, on which tab are Permissions and Administrators defined? - Answer-
Manage and Settings
Which of the following is used to initially create trust between a Gateway and Security
Management Server? - Answer-One-time Password
How many users can have read/write access in Gaia Operating System at one time? -
Answer-One
When enabling tracking on a rule, what is the default option? - Answer-log
Gaia includes Check Point Upgrade Service Engine (CPUSE), which can directly
receive updates for what components? - Answer-Licensed Check Point products for the
Gala operating system and the Gaia operating system itself.
Name the file that is an electronically signed file used by Check Point to translate the
features in the license into a code? - Answer-Contract file (.xml)
Fill in the blank: When LDAP is integrated with Check Point Security Management, it is
then referred to as _______. - Answer-User Directory
Can you use the same layer in multiple policies or rulebases? - Answer-Yes - a layer
can be shared with multiple policies and rules.
Tom has connected to the Management Server remotely using SmartConsole and is in
the process of making some Rule Base changes, when he suddenly loses connectivity.
Connectivity is restored shortly afterward. What will happen to the changes already
made? - Answer-Tom's changes will have been stored on the Management when he
reconnects and he will not lose any of his work.
Security Gateway software blades must be attached to what? - Answer-Security
Gateway
Which tool allows you to monitor the top bandwidth on smart console? - Answer-
SmartView Monitor
and Answers All Correct
A network administrator has informed you that they have identified a malicious host on
the network, and instructed you to block it. Corporate policy dictates that firewall policy
changes cannot be made at this time. What tool can you use to block this traffic? -
Answer-Anti-Malware protection
The default shell of the Gaia CLI is cli.sh. How do you change from the cli.sh shell to the
advanced shell to run Linux commands? - Answer-Execute the command 'expert' in the
cli.sh shell
Where can administrator edit a list of trusted SmartConsole clients? - Answer-In
cpconfig on a Security Management Server, in the WebUI logged into a Security
Management Server, in SmartConsole: Manage and Settings > Permissions and
Administrators > Advanced > Trusted Clients.
In which deployment is the security management server and Security Gateway installed
on the same appliance? - Answer-Standalone
When dealing with rule base layers, what two layer types can be utilized? - Answer-
Inbound Layers and Outbound Layers
How can the changes made by an administrator before publishing the session be seen
by a Super User administrator? - Answer-From the SmartView Tracker audit log.
What are the three main components of Check Point security management
architecture? - Answer-SmartConsole, Security Management, and Security Gateway
What is the main objective when using Application Control? - Answer-To filter out
specific content.
What command from the CLI would be used to view current licensing? - Answer-show
license -s
In order for changes made to policy to be enforced by a Security Gateway, what action
must an administrator perform? - Answer-Install policy
, The Gateway Status view in SmartConsole shows the overall status of Security
Gateways and Software Blades. What does the Status Attention mean? - Answer-At
least one Software Blade has a minor issue, but the gateway works.
Which of the following is NOT an authentication scheme used for accounts created
through SmartConsole? - Answer-Security questions
Which of the following is NOT a component of a Distinguished Name? - Answer-User
container
In SmartConsole, on which tab are Permissions and Administrators defined? - Answer-
Manage and Settings
Which of the following is used to initially create trust between a Gateway and Security
Management Server? - Answer-One-time Password
How many users can have read/write access in Gaia Operating System at one time? -
Answer-One
When enabling tracking on a rule, what is the default option? - Answer-log
Gaia includes Check Point Upgrade Service Engine (CPUSE), which can directly
receive updates for what components? - Answer-Licensed Check Point products for the
Gala operating system and the Gaia operating system itself.
Name the file that is an electronically signed file used by Check Point to translate the
features in the license into a code? - Answer-Contract file (.xml)
Fill in the blank: When LDAP is integrated with Check Point Security Management, it is
then referred to as _______. - Answer-User Directory
Can you use the same layer in multiple policies or rulebases? - Answer-Yes - a layer
can be shared with multiple policies and rules.
Tom has connected to the Management Server remotely using SmartConsole and is in
the process of making some Rule Base changes, when he suddenly loses connectivity.
Connectivity is restored shortly afterward. What will happen to the changes already
made? - Answer-Tom's changes will have been stored on the Management when he
reconnects and he will not lose any of his work.
Security Gateway software blades must be attached to what? - Answer-Security
Gateway
Which tool allows you to monitor the top bandwidth on smart console? - Answer-
SmartView Monitor
