What physical machine must have access to the User Center public IP when checking for new packages with SmartUpdate?
A. SmartUpdate installed SmartCenter Server PC
B. SmartUpdate GUI PC
C. VPN.1 Security Gateway getting the new upgrade package
D. SmartUpdate Repository SQL database Server
An NGXR65 HA cluster contains two members with external interfaces 172.28.108.1 and 172.28.108.2. The internal interfaces are 10.4.8.1 and 10.4.8.2. The external cluster VIP address is 172.28.108.3 and the internal cluster VIP address is 10.4.8.3. The synchronization interfaces are 192.168.1.1 and 192.168.1.2. The Security Administrator discovers State Synchronization is not working properly. The cphaprob if command output displays shows:What is causing the State Synchronization problem?
A. The synchronization network has been defined as "Network Objective: Cluster + 1st sync" with an IP address 192.168.1.3 defined in the NGX cluster object's topology. This configuration is supported in NGX and therefore the above screenshot is not relevant to the sync problem.
B. The synchronization interface on the individual NGX cluster member object's Topology tab is enabled with "Cluster Interface". Disable this setting.
C. The synchronization network has a cluster VIP address (192.168.1.3) defined in the NGX cluster object's topology. Remove the 192.168.1.3 VIP interface from the cluster topology.
D. Another cluster is using 192.168.1.3 as one of the unprotected interfaces.
When you check "Web Server" in a host.node object, what happens to the host?
A. The Web server daemon is enabled on the host.
B. More granular controls are added to the host, in addition to Web Intelligence tab settings.
C. You can specify allowed ports in the Web server's node.object properties. You then do not need to list all allowed ports in the Rule Base
D. SmartDefense Web Intelligence is enabled to check on the host.
When configuring Port Scanning, which level of sensitivity detects more than 100 inactive ports are tried for a period of 30 seconds?
A. LOW
B. High
C. None. Such a level does not exist.
D. Medium
Choose all correct statements. SmartUpdate, located on a VPN-1 NGX SmartCenter Server, allows you to
(1)Remotely perform a first time installation of VPN-1 NGX on a new machine.
(2)Determine OS patch levels on remote machines.
(3)Update installed Check Point and any OPSEC certified software remotely.
(4)Update installed Check Point software remotely.
(5)Track installed versions of Check Point and OPSEC products.
(6)Centrally manage licenses.
A. 1.3.4.S6
B. 1 and4
C. 4.5.S6
D. 2,4,5,and6
Central License management allows a Security Administrator to perform which of the following functions? (1)Check for expired licenses.
(2)Sort licenses and view license properties.
(3)Attach both NGX Central and Local licenses to a remote module.
(4)Delete both NGX Local licenses and Central licenses from a remote module. (5)Add or remove a license to or from the license repository.
(6)Attach
and/or delete only NGX Central licenses to a remote module (not Local licenses).
A.
1,2,3,4,and5
B.
1.2.5.and6
C.
2,3,4,and5
D.
2. 5. and6
When configuring Port Scanning, which level of sensitivity detects more than 100 inactive ports are tried for a period of 30 seconds?
A. LOW
B. High
C. None. Such a level does not exist.
D. Medium
You are concerned that your company's servers might be vulnerable to an attack where a client fools a server into sending large amounts of data, using small packets. Which SmartDefense option should you use to protect the servers?
A. Network Security > Denial of Service > Non-TCP Flooding
B. Network Security > Denial of Service > LAND
C. Network Security > IP and ICMP > Block Null Payload ICMP
D. Network Security > TCP > Small PMTU
SmartView Tracker logs the following Security Administrator activities, EXCEPT
A. Administrator login and logout.
B. Object creation, deletion, and editing.
C. Tracking SLA compliance.
D. Rule Base changes.
Which of the following would NOT be a function of the Check Point license-upgrade tool?
A. Upgrade locally managed licenses.
B. Simulate the license-upgrade process.
C. Manually upgrade a specific license.
D. View the status of the currently installed licenses.
