Which one of the following is TRUE?

1. A. Ordered policy is a sub-policy within another policy
2. B. One policy can be either inline or ordered, but not both
3. C. Inline layer can be defined as a rule action
4. D. Pre-R80 Gateways do not support ordered layers

Correct Answer: C

Which message indicates IKE Phase 2 has completed successfully?

1. A. Quick Mode Complete
2. B. Aggressive Mode Complete
3. C. Main Mode Complete
4. D. IKE Mode Complete

Correct Answer: A

Which product correlates logs and detects security threats, providing a centralized display of potential attack patterns from all network devices?

1. A. SmartDashboard
2. B. SmartEvent
3. C. SmartView Monitor
4. D. SmartUpdate

Correct Answer: B
SmartEvent correlates logs from all Check Point enforcement points, including end-points, to identify suspicious activity from the clutter. Rapid data analysis and custom event logs immediately alert administrators to anomalous behavior such as someone attempting to use the same credential in multiple geographies simultaneously. Ref: https://www.checkpoint.com/products/smartevent/

Name the utility that is used to block activities that appear to be suspicious.

1. A. Penalty Box
2. B. Drop Rule in the rulebase
3. C. Suspicious Activity Monitoring (SAM)
4. D. Stealth rule

Correct Answer: C
https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_CLI_ReferenceGuide/Topics-CLIG

Which policy type is used to enforce bandwidth and traffic control rules?

1. A. Access Control
2. B. Threat Emulation
3. C. Threat Prevention
4. D. QoS

Correct Answer: D
https://sc1.checkpoint.com/documents/R80.30/WebAdminGuides/EN/CP_R80.30_QoS_AdminGuide/html_fram