Stateful Inspection compiles and registers connections where?
Options:
A.
Connection Cache
B.
State Cache
C.
State Table
D.
Network Table
Answer:
C
Explanation:
Explanation:
Stateful Inspection compiles and registers connections in the State Table. The State Table is a database that stores information about active connections and sessions on the Security Gateway. The other options are not valid names for the database that stores connection information.
What two ordered layers make up the Access Control Policy Layer?
Options:
A.
URL Filtering and Network
B.
Network and Threat Prevention
C.
Application Control and URL Filtering
D.
Network and Application Control
Answer:
B
Explanation:
Explanation:
The two ordered layers that make up the Access Control Policy Layer are Network and Threat Prevention. Network layer contains rules that define how traffic is inspected and handled by the Security Gateway. Threat Prevention layer contains rules that define how traffic is inspected by the Threat Prevention Software Blades2. References: Check Point R81 Security Management Administration Guide
Question 102
Which tool is used to enable cluster membership on a Gateway?
Options:
A.
SmartUpdate
B.
cpconfig
C.
SmartConsole
D.
sysconfig
Answer:
B
Explanation:
Explanation:
The tool used to enable cluster membership on a Gateway is cpconfig2. This tool allows you to configure basic settings of Check Point products, such as cluster membership, administrator name and password, GUI clients, and Secure Internal Communication (SIC)2. References: Next Generation Security Gateway Guide R80
Question 103
When should you generate new licenses?
Options:
A.
Before installing contract files.
B.
After an RMA procedure when the MAC address or serial number of the appliance changes.
C.
When the existing license expires, license is upgraded or the IP-address where the license is tied changes.
D.
Only when the license is upgraded.
Answer:
C
Explanation:
Explanation:
You should generate new licenses when the existing license expires, license is upgraded or the IP-address where the license is tied changes13. These scenarios require a new license to be generated and activated on the Security Gateway or Management Server13. Therefore, the correct answer is C. When the existing license expires, license is upgraded or the IP-address where the license is tied changes