Which of the following technologies extracts detailed information from packets and stores that information in state tables?
Correct Answer: B
The INSPECT Engine is a technology that extracts detailed information from packets and stores that information in state tables.It enables stateful inspection and application layer filtering12INSPECT Engine,Stateful Inspection
Question 42
What are the predefined Autonomous Threat Prevention Profiles?
Correct Answer: B
The correct answer is B as the best match among the available choices, but the official R82 naming is more complete. Check Point R82 Autonomous Threat Prevention supports predefined profiles such as Recommended for Perimeter, Strict Security for Perimeter, Cloud/Data Center, Internal Network, Recommended for Guest Network, and Monitor. Option B correctly captures the key tested profile families: Perimeter, Strict, Internal, and Guest. Option A is incorrect because "DMZ" is not the official predefined profile name in the R82 Autonomous Threat Prevention profile list. Option C incorrectly uses "External" instead of the official perimeter/internal/guest/data-center profile model. Option D incorrectly uses "Internet," which is not the official profile name. These profiles let administrators apply security posture quickly based on the protected network segment, such as perimeter traffic, internal east-west traffic, data center traffic, or guest network monitoring. The value is operational consistency: the administrator selects the profile closest to the gateway role rather than manually tuning every protection from scratch. Reference topics: Threat Prevention Fundamentals, Autonomous Threat Prevention Profiles, Perimeter, Internal Network, Guest Network, Cloud/Data Center.
Question 43
The SmartEvent R80 Web application for real-time event monitoring is called:
Correct Answer: D
SmartView is the web application for real-time event monitoring in SmartEvent R80 and above.It provides a unified view of security events across the network and allows for quick investigation and response34. SmartEvent R80.40 Administration Guide,SmartView
Question 44
What of the following is NOT an Identity Source supported by the Check Point Identity Awareness Blade?
Correct Answer: B
The correct answer is B. Check Point Identity Awareness supports identity acquisition methods such as AD Query, Browser-Based Authentication, Identity Collector, Identity Agents, RADIUS Accounting, Remote Access, Terminal Servers, and Identity Web API. "Identity Connector and TACACS" is not the valid supported pair in this answer set. TACACS is an administrative/network-device authentication protocol, but it is not listed here as a standard Check Point Identity Awareness source for building user/computer identity mappings in Access Control policy. Option C is valid because AD Query and Browser-Based Authentication are official Identity Awareness sources; Browser-Based Authentication uses Captive Portal and can also use Transparent Kerberos Authentication. Option D is valid because RADIUS Accounting and Identity Collector are supported identity acquisition methods. Option A is also valid in the broader Identity Awareness ecosystem because Remote Access and Terminal Server identity acquisition are supported use cases. Reference topics: Identity Awareness, Identity Sources, Browser-Based Authentication, AD Query, RADIUS Accounting, Identity Collector.
Question 45
In ____________ NAT, the ____________ is translated.
Correct Answer: A
In hide NAT, the source IP address is translated. Hide NAT is also known as many-to-one NAT or PAT (Port Address Translation). It maps multiple private IP addresses to one public IP address by using different port numbers. Hide NAT allows outbound connections from the private network to the public network, but not inbound connections from the public network to the private network. In static NAT, the source or destination IP address is translated depending on the direction of the traffic. Static NAT is also known as one-to-one NAT or bi-directional NAT. It maps one private IP address to one public IP address and allows both outbound and inbound connections. In simple NAT, there is no translation of IP addresses. Simple NAT is also known as routing mode or transparent mode. It allows traffic to pass through the NAT device without any modification.There is no hide NAT for destination IP address translation5678What Is Network Address Translation (NAT)?,Network address translation,Network Address Translation Definition,Network Address Translation (NAT)