What are some of the common tasks that the SmartConsole is used for?
Correct Answer: A
The correct answer is A. SmartConsole is the primary graphical application for managing the Check Point security environment. Common administrative tasks include creating and managing security policies, managing objects, installing policies, reviewing logs and events, managing gateways and servers, and viewing or maintaining license details. Official R82 SmartConsole Help describes SmartConsole as the main GUI used to manage security policies, devices, products, events, updates, and related administrative functions. Option B is incomplete and oddly phrased because SmartConsole does more than create licenses or "monitor policies." Option C is wrong because SmartConsole does not manage every generic corporate network device such as switches, routers, and load balancers unless they are represented for Check Point security policy purposes. Option D is not a routine SmartConsole task; redeployment of management servers and gateways is a larger operational activity, not a normal SmartConsole function. The exam focus is SmartConsole's role as the central administrative GUI for Check Point security management. Reference topics: SmartConsole, Gateways & Servers view, Logs & Events, licenses, security policy management.
Question 77
Which of the following blades is NOT subscription-based and therefore does not have to be renewed on a regular basis?
Correct Answer: D
The Advanced Networking Blade is NOT subscription-based and therefore does not have to be renewed on a regular basis1011.The Advanced Networking Blade provides advanced routing capabilities such as BGP, OSPF, VRRP, and multicast routing10.The other blades are subscription-based and require annual renewal to receive updates and support from Check Point1012.
Question 78
Which two of these Check Point Protocols are used by ?
Correct Answer: B
The two Check Point Protocols that are used by are FWD and LEA567. FWD is the Firewall Daemon that handles communication between different Check Point components, such as Security Management Server, Security Gateway, SmartConsole, etc. LEA is the Log Export API that allows external applications to retrieve logs from the Security Gateway or Security Management Server. Therefore, the correct answer is B. FWD and LEA. Border Gateway Protocol - Check Point Software,Check Point IPS Datasheet,List of valid protocols for services? - Check Point CheckMates
Question 79
Which Identity Source provides identity information through Captive Portal login or Transparent Kerberos Authentication?
Correct Answer: A
The correct answer is A. Browser-Based Authentication is the Identity Awareness source that uses Captive Portal login and can also use Transparent Kerberos Authentication. When the gateway does not already recognize a user, it can redirect the user's browser to the Captive Portal so the user authenticates and the gateway can associate identity with traffic. Transparent Kerberos Authentication can provide a smoother authentication experience where the required Microsoft Active Directory /Kerberos conditions are met. Option B is wrong because Identity Agents are endpoint or terminal- server agents that report identity to the gateway, not the Captive Portal source itself. Option C is wrong because RADIUS Accounting consumes accounting records from RADIUS infrastructure. Option D is wrong because AD Query obtains user/computer information from Active Directory event data rather than Captive Portal login. The exam distinction is direct: Captive Portal and Transparent Kerberos Authentication belong to Browser-Based Authentication. Reference topics: Identity Awareness, Browser-Based Authentication, Captive Portal, Transparent Kerberos Authentication.
Question 80
Which two Identity Awareness commands are used to support identity sharing?
Correct Answer: A
The answer is A because Identity Awareness commands are used to support identity sharing between Security Gateways. Policy Decision Point (PDP) is the Security Gateway that collects identities from various sources and shares them with other gateways.Policy Enforcement Point (PEP) is the Security Gateway that enforces the policy based on the identities received from the PDP12Check Point R81 Identity Awareness Administration Guide,Check Point R81 Security Management Administration Guide