Q40. What are the commands to verify the Smart Contracts on the Security Gateway?

Q41. How would you check the connection status of a gateway to the Log server?

Q42. Which would be a good reason to let “fw monitor’ display results to the console, rather the output to a file?

Q43. How many captures does the command “fw monitor -p all” take?

Q44. After reviewing the Install Policy report and error codes listed in it, you need to check if the policy installation port is open on the Security Gateway. What is the correct port to check?

Q45. One of most common reasons that firewall administrator couldn’t login anymore into a newly installed R80.x Security Management via SmartConsole is, that the 15-day trial license was expired. How can the firewall administrator install a valid license on the security management, if he only has access to the management via SmartConsole or via Gaia Portal?

Q46. Which version of SmartConsole is recommended?

Q47. As a security administrator/engineer in your company, you have noticed that your HQ Check Point Security Management Server is not receiving logs from your HQ Check Point Gateway/Cluster.
To investigate this issue in the command line, you will need to verify which process is running?

Q48. For TCP connections, when a packet arrives at the Firewall Kernel out of sequence or fragmented, which layer of IPS corrects this to allow for proper inspection?

Q49. When running the cplic command what argument is used to show the Signature key?

Q50. The customer is using Check Point appliances that were configured long ago by third-party administrators. Current policy includes different enabled IPS protections and Bypass Under Load function. Bypass Under Load is configured to disable IPS inspections if CPU and Memory usage is higher than 80%. The Customer reports that IPS protections are not working at all regardless of CPU and Memory usage. What is a possible reason of such behavior?

Q51. After manipulating the rulebase and objects with SmartConsole the application crashes and closes immediately. To troubleshoot you will need to review the crash report. In which directory on the host PC will you find this report?

Q52. To verify that communication is working between the Security Management Server and the Security Gateway, which service port should be checked?

Q53. Which of the following kernel tables can provide useful information in troubleshooting Hide NAT port exhaustion?

Q54. Which command shows the installed licenses and contracts on a Check Point device?

Q55. If you run the command “fw monitor -e “accept src.10.1.1.101 or src=172.21.201.10 or src=192.0.2.11 from the Cli.sh.
What will be captured?

Q56. The Identity Awareness process that enforces network access restrictions on traffic based on the identity and negotiates with PDP about shared identities is called?