Free Check Point Certified Security Administrator R81.20 CCSA (156-215.81.20) Practice Questions

A.  

Anti-spoofing is not needed when IPS software blade is enabled

B.  

It is more secure to create anti-spoofing groups manually

C.  

It is BEST Practice to have anti-spoofing groups in sync with the routing table

D.  

With dynamic routing enabled, anti-spoofing groups are updated automatically whenever there is a routing change

A.  

Yes, but only if all connected administrators connect with read-only permissions.

B.  

Yes, but objects edited by one administrator will be locked for editing by others until the session is published.

C.  

No, only one administrator at a time can connect to a Security Management Server

D.  

Yes, but only one of those administrators will have write-permissions. All others will have read-only permission.

A.  

Word Document (docx)

B.  

Comma Separated Value (csv)

C.  

Portable Document Format (pdf)

D.  

Text (txt)

A.  

Distributed, Bridge Mode, and Remote

B.  

Bridge Mode, Remote, and Standalone

C.  

Remote, Standalone, and Distributed

D.  

Standalone, Distributed, and Bridge Mode

A.  

Basic – Provides reliable protection on a range of non-HTTP protocols for servers, with minimal impact on network performance

B.  

Optimized – Provides excellent protection for common network products and protocols against recent or popular attacks

C.  

Strict – Provides a wide coverage for all products and protocols, with impact on network performance

D.  

Recommended – Provides all protection for all common network products and servers, with impact on network performance

A.  

Windows only

B.  

Gaia only

C.  

Gaia, SecurePlatform, and Windows

D.  

SecurePlatform only

A.  

UDP

B.  

CCP

C.  

TDP

D.  

HTTP

A.  

SmartUpdate

B.  

cpconfig

C.  

SmartConsole

D.  

sysconfig

A.  

Section titles are not sent to the gateway side.

B.  

These sections are simple visual divisions of the Rule Base and do not hinder the order of rule enforcement.

C.  

A Sectional Title can be used to disable multiple rules by disabling only the sectional title.

D.  

Sectional Titles do not need to be created in the SmartConsole.

A.  

In the system SMEM memory pool.

B.  

In State tables.

C.  

In the Sessions table.

D.  

In a CSV file on the firewall hard drive located in $FWDIR/conf/.