CheckPoint Check Point Certified Security Expert Sample Questions:
1. Match the VPN-related terms with their definitions:
A) A-3, B-4, C-1, D-2
B) A-2, B-3, C-4, D-1
C) A-3,B-2, C-1, D-4
D) A-3, B-2, C-4, D-1
2. You want VPN traffic to match packets from internal interfaces. You also want the traffic to exit the Security Gateway bound for all site-to-site VPN Communities, including Remote Access Communities. How should you configure the VPN match rule?
A) Communities > Communities
B) internal_clear > All_GwToGw
C) internal_clear > All_communities
D) Internal_clear > External_Clear
3. When configuring site-to-site VPN High Availability (HA) with MEP, which of the following is correct?
A) The decision on which MEP Gateway to use is made on the MEP Gateway's side of the tunnel.
B) MEP Gateways cannot be geographically separated machines.
C) MEP Gateways must be managed by the same SmartCenter Server.
D) If one MEP Security Gateway fails, the connection is lost and the backup Gateway picks up the next connection.
4. You have a High Availability ClusterXL configuration. Machines are not synchronized. What happens to connections on failover?
A) It is not possible to configure High Availability that is not synchronized.
B) Old connections are lost but can be reestablished.
C) Old connections are lost but are automatically recovered whenever the failed machine recovers.
D) Connections cannot be established until cluster members are fully synchronized.
5. Public keys and digital certificates provide which of the following? Select three.
A) Authentication
B) Non repudiation
C) Availability
D) Data integrity
Solutions:
| Question # 1 Answer: D | Question # 2 Answer: C | Question # 3 Answer: D | Question # 4 Answer: B | Question # 5 Answer: A,B,D |
We're so confident of our products that we provide no hassle product exchange.


By Regan

