CPU-level of your Security gateway is peaking to 100% causing problems with traffic. You suspect that the problem might be the Threat Prevention settings.
The following Threat Prevention Profile has been created.

How could you tune the profile in order to lower the CPU load still maintaining security at good level? Select the BEST answer.

1. A. Set High Confidence to Low and Low Confidence to Inactive.
2. B. Set the Performance Impact to Medium or lower.
3. C. The problem is not with the Threat Prevention Profil
4. D. Consider adding more memory to the appliance.
5. E. Set the Performance Impact to Very Low Confidence to Prevent.

Correct Answer: B

Your internal networks 10.1.1.0/24, 10.2.2.0/24 and 192.168.0.0/16 are behind the Internet Security Gateway. Considering that Layer 2 and Layer 3 setup is correct, what are the steps you will need to do in SmartConsole in order to get the connection working?

1. A. 1. Define an accept rule in Security Policy.2. Define Security Gateway to hide all internal networks behind the gateway’s external IP.3. Publish and install the policy.
2. B. 1. Define an accept rule in Security Policy.2. Define automatic NAT for each network to NAT the networks behind a public IP.3. Publish the policy.
3. C. 1. Define an accept rule in Security Policy.2. Define automatic NAT for each network to NAT the networks behind a public IP.3. Publish and install the policy.
4. D. 1. Define an accept rule in Security Policy.2. Define Security Gateway to hide all internal networks behind the gateway’s external IP.3. Publish the policy.

Correct Answer: C

Using R80 Smart Console, what does a “pencil icon” in a rule mean?

1. A. I have changed this rule
2. B. Someone else has changed this rule
3. C. This rule is managed by check point’s SOC
4. D. This rule can’t be changed as it’s an implied rule

Correct Answer: A

To provide updated malicious data signatures to all Threat Prevention blades, the Threat Prevention gateway does what with the data?

1. A. Cache the data to speed up its own function.
2. B. Share the data to the ThreatCloud for use by other Threat Prevention blades.
3. C. Log the traffic for Administrator viewing.
4. D. Delete the data to ensure an analysis of the data is done each time.

Correct Answer: B
Data from malicious attacks are shared between the Threat Prevention Software Blades and help to keep your network safe. For example, the signatures from threats that Threat Emulation identifies are added to the ThreatCloud for use by the other Threat Prevention blades. src
https://infosec.co.il/wp-content/uploads/2020/06/12-GAiA-R80.40-Threat-Prevention.pdf page 28.

Which firewall daemon is responsible for the FW CLI commands?

1. A. fwd
2. B. fwm
3. C. cpm
4. D. cpd

Correct Answer: A