CCSA NGX

[stongalok]

Which Check Point address translation method is necessary if you want to connect
from a host on the Internet via any service for a server with a reserved (RFC 1918)
IP address on your DMZ?
A. Port Address Translation
B. Hide Address Translation
C. Dynamic Source Address Translation
D. Static Destination Address Translation

Answer: no Answer

Where can an administrator configure the notification action in the event of a policy
install time change?
A. SmartView Monitor: Global Thresholds
B. SmartView Tracker: Audit Log
C. SmartDashboard: Security Gateway Object: Advanced Properties Tab
D. SmartDashboard: Policy Package Manager

Answer: No answer


The Internal Certificate Authority (ICA) is corrupt on your SmartCenter Server.
The server is installed on a SecurePlatform machine in the TestKing.com home
office. You use IP address 10.1.1.1. You need to have management connectivity
restored to a Security Gateway on a second SecurePlatform computer, which plan
to ship to another Administrator at a TestKing.com hub office.
What is the correct order for restoring management connectivity on the Gateway
before shipping it?
A. 1, 2, 3, 4, 5
B. 1, 3, 2, 4, 5
C. 2, 1, 4, 5
D. 1, 2, 3, 4
E. 2, 3, 1, 4, 5

Answer: No answer

Thanks! Please help....

[alexander]

Where can an administrator specify the notification action to be taken by the
firewall in the event that available disk space drops below 15%?
A. Real Time Monitor: Gateway Settings: Status Monitor
B. This can only by monitored by a user-defined script
C. SmartView Tracker: Audit Tab: Gateway Counters
D. SmartView Monitor: Gateway Status: Threshold Settings

I think answer can be D because SmartView Monitor can generate alerts on hardware state

Your enable Hide NAT on the network object 10.1.1.0 behind the Security
Gateway's external interface. You browse from host 10.1.1.10
successfully. You enable a log on the rule that allows 10.1.1.0 to exit the network.
How many log entries do you see for that connection in the SmartView Tracker?
A. Two, inbound
B. Only one, inbound
C. Two, one for outbound, one for inbound
D. Only one, outbound

Answer: D

[stongalok]

Which Check Point address translation method is necessary if you want to connect
from a host on the Internet via any service for a server with a reserved (RFC 1918)
IP address on your DMZ?
A. Port Address Translation
B. Hide Address Translation
C. Dynamic Source Address Translation
D. Static Destination Address Translation

Answer:

Where can an administrator configure the notification action in the event of a policy
install time change?
A. SmartView Monitor: Global Thresholds
B. SmartView Tracker: Audit Log
C. SmartDashboard: Security Gateway Object: Advanced Properties Tab
D. SmartDashboard: Policy Package Manager

Answer: No answer


The Internal Certificate Authority (ICA) is corrupt on your SmartCenter Server.
The server is installed on a SecurePlatform machine in the TestKing.com home
office. You use IP address 10.1.1.1. You need to have management connectivity
restored to a Security Gateway on a second SecurePlatform computer, which plan
to ship to another Administrator at a TestKing.com hub office.
What is the correct order for restoring management connectivity on the Gateway
before shipping it?
A. 1, 2, 3, 4, 5
B. 1, 3, 2, 4, 5
C. 2, 1, 4, 5
D. 1, 2, 3, 4
E. 2, 3, 1, 4, 5

Answer: No answer

Anyone please help. Thanks!

[BarryStiefel]

If these questions and their proposed answers have come from an official Check Point exam in some way, please don't post them here.