CCSA CERTIFICATION EXAM QUESTIONS AND ANSWERS
Why is a Central License the preferred and recommended method of licensing?
A. Central Licensing is actually not supported with Gaia.
B. Central Licensing is the only option when deploying Gaia
C. Central Licensing ties to the IP address of a gateway and can be changed to any gateway if needed.
D. Central Licensing ties to the IP address of the management server and is not dependent on the IP of
any gateway in the event it changes. - CORRECT ANSWER✅✅✅D
When enabling tracking on a rule, what is the default option?
A. Accounting Log
B. Extended Log
C. Log
D. Detailed Log - CORRECT ANSWER✅✅✅C
Gaia includes Check Point Upgrade Service Engine (CPUSE), which can directly receive updates for what
components?
A. The Security Gateway (SG) and Security Management Server (SMS) software and the CPUSE engine.
B. Licensed Check Point products for the Gala operating system and the Gaia operating system itself.
C. The CPUSE engine and the Gaia operating system.
D. The Gaia operating system only. - CORRECT ANSWER✅✅✅B
Name the file that is an electronically signed file used by Check Point to translate the features in the
license into a code?
A. Both License (.lic) and Contract (.xml) files
B. cp.macro
C. Contract file (.xml)
D. license File (.lie) - CORRECT ANSWER✅✅✅B
,Fill in the blank: When LDAP is integrated with Check Point Security Management, it is then referred to
as _______.
A. User Center
B. User Administration
C. User Directory
D. UserCheck - CORRECT ANSWER✅✅✅C
Can you use the same layer in multiple policies or rulebases?
A. Yes - a layer can be shared with multiple policies and rules.
B. No - each layer must be unique.
C. No - layers cannot be shared or reused, but an identical one can be created.
D. Yes - but it must be copied and pasted with a different name. - CORRECT ANSWER✅✅✅A
Tom has connected to the Management Server remotely using SmartConsole and is in the process of
making some Rule Base changes, when he suddenly loses connectivity. Connectivity is restored shortly
afterward. What will happen to the changes already made?
A. Tom will have to reboot his SmartConsole computer, clear the cache, and restore changes.
B. Tom will have to reboot his SmartConsole computer, and access the Management cache store on that
computer, which is only accessible after a reboot.
C. Tom's changes will be lost since he lost connectivity and he will have to start again.
D. Tom's changes will have been stored on the Management when he reconnects and he will not lose
any of his work. - CORRECT ANSWER✅✅✅D
Security Gateway software blades must be attached to what?
A. Security Gateway
B. Security Gateway container
C. Management server
D. Management container - CORRECT ANSWER✅✅✅A
Which tool allows you to monitor the top bandwidth on smart console?
,A. Logs & Monitoring
B. Smart Event
C. Gateways & Severs Tab
D. SmartView Monitor - CORRECT ANSWER✅✅✅D
A security zone is a group of one or more network interfaces from different centrally managed
gateways. What is considered part of the zone?
A. The zone is based on the network topology and determined according to where the interface leads to.
B. Security Zones are not supported by Check Point firewalls.
C. The firewall rule can be configured to include one or more subnets in a zone.
D. The local directly connected subnet defined by the subnet IP and subnet mask. - CORRECT
ANSWER✅✅✅A
When comparing Stateful Inspection and Packet Filtering, what is a benefit that Stateful Inspection
offers over Packer Filtering?
A. Stateful Inspection offers unlimited connections because of virtual memory usage.
B. Stateful Inspection offers no benefits over Packet Filtering.
C. Stateful Inspection does not use memory to record the protocol used by the connection.
D. Only one rule is required for each connection. - CORRECT ANSWER✅✅✅D
Which type of Endpoint Identity Agent includes packet tagging and computer authentication?
A. Full
B. Custom
C. Complete
D. Light - CORRECT ANSWER✅✅✅A
Fill in the blanks: Gaia can be configured using _______ the ________.
A. Command line interface; WebUI
B. Gaia Interface; GaiaUI
C. WebUI; Gaia Interface
, D. GaiaUI; command line interface - CORRECT ANSWER✅✅✅A
An administrator can use section titles to more easily navigate between large rule bases. Which of these
statements is FALSE?
A. Section titles are not sent to the gateway side.
B. These sections are simple visual divisions of the Rule Base and do not hinder the order of rule
enforcement.
C. A Sectional Title can be used to disable multiple rules by disabling only the sectional title.
D. Sectional Titles do not need to be created in the SmartConsole. - CORRECT ANSWER✅✅✅C
In which scenario is it a valid option to transfer a license from one hardware device to another?
A. From a 4400 Appliance to a 2200 Appliance
B. From a 4400 Appliance to an HP Open Server
C. From an IBM Open Server to an HP Open Server
D. From an IBM Open Server to a 2200 Appliance - CORRECT ANSWER✅✅✅C
What are the three types of UserCheck messages?
A. action, inform, and ask
B. ask, block, and notify
C. block, action, and warn
D. inform, ask, and block - CORRECT ANSWER✅✅✅D
A stateful inspection firewall works by registering connection data and compiling this information.
Where is the information stored?
A. In the system SMEM memory pool.
B. In State tables.
C. In the Sessions table.
D. In a CSV file on the firewall hard drive located in $FWDIR/conf/. - CORRECT ANSWER✅✅✅B
Why is a Central License the preferred and recommended method of licensing?
A. Central Licensing is actually not supported with Gaia.
B. Central Licensing is the only option when deploying Gaia
C. Central Licensing ties to the IP address of a gateway and can be changed to any gateway if needed.
D. Central Licensing ties to the IP address of the management server and is not dependent on the IP of
any gateway in the event it changes. - CORRECT ANSWER✅✅✅D
When enabling tracking on a rule, what is the default option?
A. Accounting Log
B. Extended Log
C. Log
D. Detailed Log - CORRECT ANSWER✅✅✅C
Gaia includes Check Point Upgrade Service Engine (CPUSE), which can directly receive updates for what
components?
A. The Security Gateway (SG) and Security Management Server (SMS) software and the CPUSE engine.
B. Licensed Check Point products for the Gala operating system and the Gaia operating system itself.
C. The CPUSE engine and the Gaia operating system.
D. The Gaia operating system only. - CORRECT ANSWER✅✅✅B
Name the file that is an electronically signed file used by Check Point to translate the features in the
license into a code?
A. Both License (.lic) and Contract (.xml) files
B. cp.macro
C. Contract file (.xml)
D. license File (.lie) - CORRECT ANSWER✅✅✅B
,Fill in the blank: When LDAP is integrated with Check Point Security Management, it is then referred to
as _______.
A. User Center
B. User Administration
C. User Directory
D. UserCheck - CORRECT ANSWER✅✅✅C
Can you use the same layer in multiple policies or rulebases?
A. Yes - a layer can be shared with multiple policies and rules.
B. No - each layer must be unique.
C. No - layers cannot be shared or reused, but an identical one can be created.
D. Yes - but it must be copied and pasted with a different name. - CORRECT ANSWER✅✅✅A
Tom has connected to the Management Server remotely using SmartConsole and is in the process of
making some Rule Base changes, when he suddenly loses connectivity. Connectivity is restored shortly
afterward. What will happen to the changes already made?
A. Tom will have to reboot his SmartConsole computer, clear the cache, and restore changes.
B. Tom will have to reboot his SmartConsole computer, and access the Management cache store on that
computer, which is only accessible after a reboot.
C. Tom's changes will be lost since he lost connectivity and he will have to start again.
D. Tom's changes will have been stored on the Management when he reconnects and he will not lose
any of his work. - CORRECT ANSWER✅✅✅D
Security Gateway software blades must be attached to what?
A. Security Gateway
B. Security Gateway container
C. Management server
D. Management container - CORRECT ANSWER✅✅✅A
Which tool allows you to monitor the top bandwidth on smart console?
,A. Logs & Monitoring
B. Smart Event
C. Gateways & Severs Tab
D. SmartView Monitor - CORRECT ANSWER✅✅✅D
A security zone is a group of one or more network interfaces from different centrally managed
gateways. What is considered part of the zone?
A. The zone is based on the network topology and determined according to where the interface leads to.
B. Security Zones are not supported by Check Point firewalls.
C. The firewall rule can be configured to include one or more subnets in a zone.
D. The local directly connected subnet defined by the subnet IP and subnet mask. - CORRECT
ANSWER✅✅✅A
When comparing Stateful Inspection and Packet Filtering, what is a benefit that Stateful Inspection
offers over Packer Filtering?
A. Stateful Inspection offers unlimited connections because of virtual memory usage.
B. Stateful Inspection offers no benefits over Packet Filtering.
C. Stateful Inspection does not use memory to record the protocol used by the connection.
D. Only one rule is required for each connection. - CORRECT ANSWER✅✅✅D
Which type of Endpoint Identity Agent includes packet tagging and computer authentication?
A. Full
B. Custom
C. Complete
D. Light - CORRECT ANSWER✅✅✅A
Fill in the blanks: Gaia can be configured using _______ the ________.
A. Command line interface; WebUI
B. Gaia Interface; GaiaUI
C. WebUI; Gaia Interface
, D. GaiaUI; command line interface - CORRECT ANSWER✅✅✅A
An administrator can use section titles to more easily navigate between large rule bases. Which of these
statements is FALSE?
A. Section titles are not sent to the gateway side.
B. These sections are simple visual divisions of the Rule Base and do not hinder the order of rule
enforcement.
C. A Sectional Title can be used to disable multiple rules by disabling only the sectional title.
D. Sectional Titles do not need to be created in the SmartConsole. - CORRECT ANSWER✅✅✅C
In which scenario is it a valid option to transfer a license from one hardware device to another?
A. From a 4400 Appliance to a 2200 Appliance
B. From a 4400 Appliance to an HP Open Server
C. From an IBM Open Server to an HP Open Server
D. From an IBM Open Server to a 2200 Appliance - CORRECT ANSWER✅✅✅C
What are the three types of UserCheck messages?
A. action, inform, and ask
B. ask, block, and notify
C. block, action, and warn
D. inform, ask, and block - CORRECT ANSWER✅✅✅D
A stateful inspection firewall works by registering connection data and compiling this information.
Where is the information stored?
A. In the system SMEM memory pool.
B. In State tables.
C. In the Sessions table.
D. In a CSV file on the firewall hard drive located in $FWDIR/conf/. - CORRECT ANSWER✅✅✅B
