Fill in the blank: An identity server uses a _____ for user authentication.

1. A. Shared secret
2. B. Certificate
3. C. One-time password
4. D. Token

Correct Answer: A

Which option will match a connection regardless of its association with a VPN community?

1. A. All Site-to-Site VPN Communities
2. B. Accept all encrypted traffic
3. C. All Connections (Clear or Encrypted)
4. D. Specific VPN Communities

Correct Answer: B

A security zone is a group of one or more network interfaces from different centrally managed gateways. What is considered part of the zone?

1. A. The zone is based on the network topology and determined according to where the interface leads to.
2. B. Security Zones are not supported by Check Point firewalls.
3. C. The firewall rule can be configured to include one or more subnets in a zone.
4. D. The local directly connected subnet defined by the subnet IP and subnet mask.

Correct Answer: A
The Interface window opens. The Topology area of the General pane shows the Security Zone to which the interface is already bound. By default, the Security Zone is calculated according to where the interface Leads To. https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_SecurityManagement_AdminGuide

Which of the following is NOT a valid configuration screen of an Access Role Object?

1. A. Users
2. B. Networks
3. C. Time
4. D. Machines

Correct Answer: C

Which SmartConsole application shows correlated logs and aggregated data to provide an overview of potential threats and attack patterns?

1. A. SmartEvent
2. B. SmartView Tracker
3. C. SmartLog
4. D. SmartView Monitor

Correct Answer: A
https://www.checkpoint.com/downloads/products/smartevent-datasheet.pdf