Sample Questions:

Q) Which of the following is NOT an internal/native Check Point command?

A. fwaccel on

B. fw ct1 debug

C. tcpdump

D. cphaprob

Q) Which one of the following is true about Threat Emulation?

A. Takes less than a second to complete

B. Works on MS Office and PDF files only

C. Always delivers a file

D. Takes minutes to complete (less than 3 minutes)

Q) The “MAC magic” value must be modified under the following condition:

A. There is more than one cluster connected to the same VLAN

B. A firewall cluster is configured to use Multicast for CCP traffic

C. There are more than two members in a firewall cluster

D. A firewall cluster is configured to use Broadcast for CCP traffic

Q) The Correlation Unit performs all but which of the following actions:

A. Marks logs that individually are not events, but may be part of a larger pattern to be identified later

B. Generates an event based on the Event policy

C. Assigns a severity level to the event

D. Takes a new log entry that is part of a group of items that together make up an event, and adds it to an ongoing event

Q) Which command collects diagnostic data for analyzing customer setup remotely?

A. cpinfo

B. migrate export

C. sysinfo

D. cpview

Q) The CDT utility supports which of the following?

A. Major version upgrades to R77.30

B. Only Jumbo HFA’s and hotfixes

C. Only major version upgrades to R80.10

D. All upgrades

Q) Sticky Decision Function (SDF) is required to prevent which of the following? Assume you set up an Active-Active cluster.

A. Symmetric routing

B. Failovers

C. Asymmetric routing

D. Anti-Spoofing