CHKP2 - 51 to 100

Which two Cluster Solutions are available under R81.10?

• ClusterXL and NSRP

• VRRP and HSRP

• VRRP and IP Clustering

• ClusterXL and VRRP

Alice & Bob are going to deploy Management Data Plane Separation (MDPS) for all their Check Point Security Gateway(s)/Cluster(s). Which of the following statement is true?

• Each network environment is dependent and includes interfaces, routes, sockets, and processes

• Management Plane – To access, provision and monitor the Security Gateway

• Data Plane – To access, provision and monitor the Security Gateway

• Management Plane – for all other network traffic and processing

When URL Filtering is set, what identifying data gets sent to the Check Point Online Web Service?

• The URL and server certificate are sent to the Check Point Online Web Service.

• The full URL, including page data, is sent to the Check Point Online Web Service.

• The host part of the URL is sent to the Check Point Online Web Service.

• The URL and IP address are sent to the Check Point Online Web Service.

How do logs change when the "Accounting" tracking option is enabled on a traffic rule?

• Involved traffic logs will be forwarded to a log server.

• Provides log details view email to the Administrator.

• Involved traffic logs are updated every 10 minutes to show how much data has passed on the connection.

• Provides additional information to the connected user.

To increase security, the administrator has modified the Core protection 'Host Port Scan' from 'Medium' to 'High' Predefined Sensitivity. Which Policy should the administrator install after Publishing the changes?

• The Access Control and Threat Prevention Policies.

• The Access Control Policy.

• The Access Control & HTTPS Inspection Policy.

• The Threat Prevention Policy.

Which Check Point process provides logging services, such as forwarding logs from Gateway to Log Server providing Log Export API (LEA) & Event Logging API (ELA) services?

• DASSERVICE

• FWD

• CPVIEWD

• CPD

What mechanism can ensure that the Security Gateway can communicate with the Management Server with ease in situations with overwhelmed network resources?

• The corresponding feature is new to R81.10 and is called "Management Data Plane Separation"

• The corresponding feature is called "Dynamic Dispatching"

• There is a feature for ensuring stable connectivity to the management server and is done via Priority Queuing

• The corresponding feature is called "Dynamic Split"

According to the policy installation flow the transfer state (CPTA) is responsible for the code generated by the FWM. On the Security Gateway side, a process receives them and first stores them into a temporary directory. Which process is true for receiving these files:

• FWD

• CPD

• FWM

• RAD

What is the amount of Priority Queues by default?

• There are 8 priority queues and this number cannot be changed.

• There is no distinct number of queues since it will be changed in a regular basis based on its system requirements.

• There are 7 priority queues by default and this number cannot be changed.

• There are 8 priority queues by default, and up to 8 additional queues can be manually configured

In R81.10 a new feature dynamic log distribution was added. What is this for?

• Configure the Security Gateway to distribute logs between multiple active Log Servers to support a better rate of Logs and Log Servers redundancy

• In case of a Management High Availability the management server stores the logs dynamically on the member with the most available disk space in /var/log

• Synchronize the log between the primary and secondary management server in case of a Management High Availability

• To save disk space in case of a firewall cluster local logs are distributed between the cluster members