Correct Answer: A

Correct Answer: A

The users and user groups are arranged on the Account Unit in the tree structure of the LDAP server. User management in User Directory is external, not local. You can change the User Directory templates. Users associated with this template get the changes immediately. You can change user definitions manually in SmartDashboard, and the changes are immediate on the server. Reference: https://sc1.checkpoint.com/documents/R77/ CP_R77_SecurityManagement_WebAdminGuide/html_frameset.htm?topic=documents/R77/CP_R77_SecurityManagement_WebAdminGuide/94041

Correct Answer: C

To create an access role:

1.

Select Users and Administrators in the Objects Tree.

2.

Right-click Access Roles > New Access Role.

The Access Role window opens.

3.

Enter a Name and Comment (optional) for the access role.

4.

In the Networks tab, select one of these:

Any network

Specific networks - Click the plus sign and select a network.

Your selection is shown in the Networks node in the Role Preview pane.

5.

In the Users tab, select one of these:

Any user

All identified users - Includes users identified by a supported authentication method (internal users, AD users or LDAP users).

Specific users - Click the plus sign.

A window opens. You can search for Active Directory entries or select them from the list.

6.

In the Machines tab, select one of these:

Any machine

All identified machines - Includes machines identified by a supported authentication method (AD).

Specific machines - Click the plus sign.

You can search for AD entries or select them from the list.

7.

Optional: For computers that use Full Identity Agents, from the Machines tab select Enforce IP spoofing protection.

8.

Click OK.

The access role is added to the Users and Administrators tree.

Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Firewall_WebAdmin/92705.htm

Correct Answer: C

Correct Answer: D

Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_Firewall_WebAdmin/92708.htm

Correct Answer: D

Reference: https://www.checkpoint.com/downloads/product-related/r80.10-mgmt-architecture-overview.pdf

Correct Answer: B

Correct Answer: A

Correct Answer: B

:

AD Query extracts user and computer identity information from the Active Directory Security Event Logs. The system generates a Security Event log entry when a user or computer accesses a network resource. For example, this occurs when

a user logs in, unlocks a screen, or accesses a network drive.

Reference : https://sc1.checkpoint.com/documents/R76/CP_R76_IdentityAwareness_AdminGuide/62402.htm

Correct Answer: A

Did you know: mgmt_cli can accept csv files as inputs using the --batch option.

The first row should contain the argument names and the rows below it should hold the values for these parameters.

So an equivalent solution to the powershell script could look like this:

data.csv:

mgmt_cli add host --batch data.csv -u -p -m

This can work with any type of command not just "add host" : simply replace the column names with the ones relevant to the command you need.

Reference: https://community.checkpoint.com/thread/1342 https://sc1.checkpoint.com/documents/R80/APIs/#gui-cli/add-access-rule