Passed CCSE (9/29/2007)

[cdc443]

Hi All,

I just passed the CCSE exam with 100/100 score. Here is how I have been studing:

1. Setup a checkpoint lab with 15 days license key.
2. Read the PDF guide from the Check Point website to review materials and to complete the lab.
3. Use the Actualtests v3/16/2007 to practice but there are some wrong answers. PLEASE, DO NOT depend on this practice test. It will help you some questions but not all.

If you have any confused questions, you can ask me here. Everyone will be happy to correct for you.

Good Luck. Please, do not ask me send something to you.

Regards, cdc443

[sabarishr]

Hi dude,

congratulations!!! i am planning to take my exam in 2 days time. i have read all the checkpoint materials and also have practiced a lot in the test lab. i have also gone through the pass4sure and AT dumps. but, i have different answers for certain questions in both these version. could you please point out the questions numbers that has the wrong answers in the AT Dumps version (03/16/2007). Thanks in advance

Kind Regards,
Sabarish.

[cdc443]

Hi Sabarishr,

I think you are ready to test the CCSE exam and you will pass it. If you are not sure on any questions, just post here . I will give you the answer.

You will pass it. Good luck ok.

Regards,

cdc434

[sabarishr]

Hi dude,

Thank you very much. Anyway, I have couple of question here that i am not sure abt the right answer. could you please help me and provide me the correct answer. the questions are as follows:

Hi dude,

Thank you very much for your response. I have doubts on couple of questions.

1. You have a production implementation of Management High Availability, at Version VPN-1 NG with application intelligence R55. You must upgrade two smartcenter servers to VPN-1. What is the correct procedure?

A.1. Synchronize the two servers.
2. Upgrade the secondary
3. Upgrade the primary
4. Configure both smartcenter server host objects version to VPN-1 NGX
5. Synchronize the servers again

B. Synchronize the two servers.
2. Advance Upgrade on the primary
3. Upgrade the secondary
4. Configure both smartcenter server host objects version to VPN-1 NGX
5. Synchronize the servers again

2. How would you configure a rule in a security policy to allow SIP traffic from end point Net_A to Net_B through NGX gateway?

A. Net_A/Net_B/sip/accept
B. Net_A/Net_B/sip and sip_any/accept

3. Problem occurs when distributing IPSEC packets in a load sharing multicast mode cluster, even though the machines have the same source and destination IP addresses. What is the best load sharing method for preventing this?

A. Load sharing based on IP Address only
B. Load sharing based on IP Address and ports

4. Setup SIP with proxy. IP phones are in the 172.16.100.0 network. Proxy is installed on the 172.16.100.100. To allow outbound calls from SIP-net to Net_B on the internet. You have defined the following

Network object SIP-net 172.16.100.0/24
SIP-gateway 172.16.100.100
VoIP Domain object VoIP_domain_A
End-point domain SIP-net
VoIPgateway installed at SIP-gatewat host object?

A. SIP-Gateway/Net_B/sip_any/accept
B. SIP-Gateway/Net_B/sip/accept
C. VoIP_domain_A/Net_B/sip, sip_any/accept

5. Your current setup is standalone firewall with NG AI R55. you want to upgrade to a distributed environment where the existing machine will the smartcenter server and the new machine will be VPN-1 Pro gateway. How do you request a new license for the VPN-1 NGX upgrade?
A. Request a VPN-1 NGX SmartCenter Server license using the NG AL smart center server IP Address. Request a new central license for the NGX VPN-1 Pro gateway.
B. Request a VPN-1 NGX SmartCenter Server license using the NG AL smart center server IP Address. Request a new central license for the NGX VPN-1 Pro gateway, license for the existing smart center server IP Address.

6. Just the answer alone since the question is diagrammatic and long.

D The connection from certkiller 1 to the internal WebTrends server is not allowed in the policy.
Fix Add a rule in certkiller 2’s policy with source certkiller 1, destination WebTrends server, service TCP 18182 and action accept

E. The connection from certkiller 1 to the internal WebTrends server is not allowed in the policy.
Fix Add a rule in certkiller 1’s policy with source certkiller 1, destination WebTrends server, service TCP 18182 and action accept

Thanks,

Sabarish

[sabarishr]

hi buddy,

i have the last 2 questions. Thanks for your help

1. How can you reset SIC between smartcenter server and security gateway?

A. Run the command from sicreset to reinitialize the ICA of the smart center. Then retype the activation key on the security gateway from smartdashboard.
B. From cpconfig on the smartcenter server, choose SIC option and retype the activation key. Next, retype the same key in the gateway object in smartdashboard and reinitialize SIC.
C. From the smartcenter server’s command line type fw putkey –p <shared key><IP of the smartcenter server>
D. From the smartcenter server’s command line type fw putkey –p <shared key><IP of the security gateway>
E. Re-install the security gateway.


2. Which NGX command will be used to revert back to earlier version of security policy without changing the object configurations?

A. upgrade_export/upgrade_import
B. policy package management
C. cpconfig
D. database revision control

Thanks,

Kind Regards,
Sabarish

[dew1902]

Above questions:

1. B comments: I believe the activation key is retyped on the enforcement module and not the smartcenter server by typing cpconfig.
2.D.database rivision control

[sabarishr]

Hi dude,

Thank a lot. my answers are correct. please throw a loght on other questions and give me the answers

Thanks in advance,

Kind Regards,
Sabarish