Exam- CCSA Exam with Complete Solutions
Which of the following is used to extract state related info from packets and store that info in
state tables? Correct-INSPECT engine
Which is true about Stateful Inspection? Correct-It examines not only the headers, but also
all the content.
What are the three main components of CP Mgmt architecture? Correct-- SmartConsole
- Security Mgmt.
- Security Gateway
What technologies are used to deny or permit network traffic? Correct-- Packet Filtering
- Stateful Inspection
- Application Layer Firewall
Gaia has two users that cannot be deleted. What are those users? Correct-Admin and
Monitor
, Exam- CCSA Exam with Complete Solutions
The default shell of Gaia CLI is cli.sh. How do you change cli.sh shell to advanced shell?
Correct-Execute 'expert' in the cli.sh shell
Which tool allows for automatic updated of Gaia OS and CheckPoint products? Correct-
CPUSE (CheckPoint Upgrade Service Engine)
Name the pre-defined roles in Gaia OS Correct-AdminRole, cloningAdminRole,
MonitorRole
What does "unknown" SIS status shown on SmartConsole mean? Correct-There is no
connection b/w the Security Gateway and Security Mgmt. Server
Secure Internal Communication (SIC) is handled by what process? Correct-CPD
When an admin sees a lock on a gateway object and cannot edit it, what does that mean?
Correct-A. The gateway is not powered on.
B. Incorrect routing to reach the gateway.
C. The Admin would need to login to Read-Only mode
, Exam- CCSA Exam with Complete Solutions
D. Another Admin has made an edit to that object and has yet to publish the change.
Answer: D
Name the file that is an electronically signed file used by CP to translate the features in the
license into code. Correct-cp.macro
What app is used for the central management and deployment of licenses and packages?
Correct-SmartUpdate
What command from the CLI would be used to view the current licensing? Correct-cplic
print
What are the two basic rules that are recommended to for building an effective security
policy? Correct-Cleanup Rule and Stealth Rule
What are the four policy types for each policy package? Correct-- Access Control
, Exam- CCSA Exam with Complete Solutions
- Custom Threat Protection
- Autonomous Threat Prevention
- HTTPS Inspector
Which part of the SmartConsole allows admins to add, edit, delete, and clone objects?
Correct-Object Explorer
In order for changes to be made to a policy & be enforced by the Security Gateway, what has
to happen? Correct-Install policy
Can you used the same layer in multiple policies or rulebases? Correct-Yes - a layer can be
shared across multiple
What default layers are included when creating a new policy layer? Correct-- Access
Control
- Threat Prevention
- HTTPS Inspection
Which of the following is used to extract state related info from packets and store that info in
state tables? Correct-INSPECT engine
Which is true about Stateful Inspection? Correct-It examines not only the headers, but also
all the content.
What are the three main components of CP Mgmt architecture? Correct-- SmartConsole
- Security Mgmt.
- Security Gateway
What technologies are used to deny or permit network traffic? Correct-- Packet Filtering
- Stateful Inspection
- Application Layer Firewall
Gaia has two users that cannot be deleted. What are those users? Correct-Admin and
Monitor
, Exam- CCSA Exam with Complete Solutions
The default shell of Gaia CLI is cli.sh. How do you change cli.sh shell to advanced shell?
Correct-Execute 'expert' in the cli.sh shell
Which tool allows for automatic updated of Gaia OS and CheckPoint products? Correct-
CPUSE (CheckPoint Upgrade Service Engine)
Name the pre-defined roles in Gaia OS Correct-AdminRole, cloningAdminRole,
MonitorRole
What does "unknown" SIS status shown on SmartConsole mean? Correct-There is no
connection b/w the Security Gateway and Security Mgmt. Server
Secure Internal Communication (SIC) is handled by what process? Correct-CPD
When an admin sees a lock on a gateway object and cannot edit it, what does that mean?
Correct-A. The gateway is not powered on.
B. Incorrect routing to reach the gateway.
C. The Admin would need to login to Read-Only mode
, Exam- CCSA Exam with Complete Solutions
D. Another Admin has made an edit to that object and has yet to publish the change.
Answer: D
Name the file that is an electronically signed file used by CP to translate the features in the
license into code. Correct-cp.macro
What app is used for the central management and deployment of licenses and packages?
Correct-SmartUpdate
What command from the CLI would be used to view the current licensing? Correct-cplic
What are the two basic rules that are recommended to for building an effective security
policy? Correct-Cleanup Rule and Stealth Rule
What are the four policy types for each policy package? Correct-- Access Control
, Exam- CCSA Exam with Complete Solutions
- Custom Threat Protection
- Autonomous Threat Prevention
- HTTPS Inspector
Which part of the SmartConsole allows admins to add, edit, delete, and clone objects?
Correct-Object Explorer
In order for changes to be made to a policy & be enforced by the Security Gateway, what has
to happen? Correct-Install policy
Can you used the same layer in multiple policies or rulebases? Correct-Yes - a layer can be
shared across multiple
What default layers are included when creating a new policy layer? Correct-- Access
Control
- Threat Prevention
- HTTPS Inspection
