True or False: In R80, more than one administrator can login to the Security Management Server with write permission at the same time.

1. A. False, this feature has to be enabled in the Global Properties.
2. B. True, every administrator works in a session that is independent of the other administrators.
3. C. True, every administrator works on a different database that is independent of the other administrators.
4. D. False, only one administrator can login with write permission.

Correct Answer: B
More than one administrator can connect to the Security Management Server at the same time. Every administrator has their own username, and works in a session that is independent of the other administrators.

Fill in the blank: With the User Directory Software Blade, you can create user definitions on a(n) _______ Server.

1. A. SecurID
2. B. LDAP
3. C. NT domain
4. D. SMTP

Correct Answer: B
https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_SecurityManagement_AdminGuide

What is NOT an advantage of Stateful Inspection?

1. A. High Performance
2. B. Good Security
3. C. No Screening above Network layer
4. D. Transparency

Correct Answer: A

To ensure that VMAC mode is enabled, which CLI command you should run on all cluster members? Choose the best answer.

1. A. fw ctl set int fwha vmac global param enabled
2. B. fw ctl get int fwha vmac global param enabled; result of command should return value 1
3. C. cphaprob –a if
4. D. fw ctl get int fwha_vmac_global_param_enabled; result of command should return value 1

Correct Answer: B

What is the purpose of the Clean-up Rule?

1. A. To log all traffic that is not explicitly allowed or denied in the Rule Base
2. B. To clean up policies found inconsistent with the compliance blade reports
3. C. To remove all rules that could have a conflict with other rules in the database
4. D. To eliminate duplicate log entries in the Security Gateway

Correct Answer: A
These are basic access control rules we recommend for all Rule Bases:
There is also an implied rule that drops all traffic, but you can use the Cleanup rule to log the traffic.