Checkpoint vol.1 - 31-60

What is the purpose of Captive Portal?

• It manages user permission in SmartConsole
• It provides remote access to SmartConsole
• It authenticates users, allowing them access to the Internet and corporate resources
• It authenticates users, allowing them access to the Gaia OS

Which of these is NOT a feature or benefit of Application Control?

• Eliminate unknown and unwanted applications in your network to reduce IT complexity and application risk.
• Identify and control which applications are in your IT environment and which to add to the IT environment.
• Scans the content of files being downloaded by users in order to make policy decisions.

• Automatically identify trusted software that has authorization to run

Identity Awareness allows easy configuration for network access and auditing based on what three items?

• Client machine IP address.
• Network location, the identity of a user and the identity of a machine.
• Log server IP address.
• Gateway proxy IP address.

How do logs change when the "Accounting" tracking option is enabled on a traffic rule?

• Involved traffic logs will be forwarded to a log server.
• Provides log details view email to the Administrator.
• Involved traffic logs are updated every 10 minutes to show how much data has passed on the connection.
• Provides additional information to the connected user.

Fill in the blank: The position of an Implied rule is manipulated in the _______ window.

• NAT
• Global Properties
• Object Explorer
• Firewall

You have enabled "Extended Log" as a tracking option to a security rule. However, you are still not seeing any data type information. What is the MOST likely reason?

• Identity Awareness is not enable
• Log Trimming is enable
• Logging has disk space issues
• Content Awareness is not enable

How many layers make up the TCP/IP model?

• 2
• 4
• 6
• 7

Fill in the blank: The _____ feature allows administrators to share a policy with other policy packages.

• Concurrent policy packages
• Concurrent policies
• Global Policies
• Shared policies

Access roles allow the firewall administrator to configure network access according to:

• remote access clients.
• a combination of computer or computer groups and networks.
• users and user groups.
• All of the above.

In SmartEvent, a correlation unit (CU) is used to do what?

• Collect security gateway logs, Index the logs and then compress the logs.
• Receive firewall and other software blade logs in a region and forward them to the primary log server.
• Analyze log entries and identify events.
• Send SAM block rules to the firewalls during a DOS attack.