Ccsa R70 Chapter 2

Front 1

(T/F) Software blades cannot be purchased independently and must be purchased in bundles.

Back 1

False. Can be purchased independently or in bundles.

Front 2

(T/F) Software blades are logical, not physical blades.

Back 2

True

Front 3

What are the key benefits of Software Blade Architecture? (5)

Back 3

Flexibility
Manageability
Total Security
Lower TCO
Guaranteed Performance

Front 4

(T/F) As business needs evolve, additional Software Blades can be quickly activated to extend security to an existing configuration/hardware foundation.

Back 4

True

Front 5

What are the two types of containers for Software Blades?

Back 5

Security Gateway Container
Security Management Container

Front 6

What are the 3 types of hardware for Software Blade containers?

Back 6

Check Point Appliance
Open Server
Virtual Environment

Front 7

What platforms are supported by R-70? (5 Major with multiple releases)

Back 7

SPLAT (2.6 kernel)
IPSO 6 (CoreXL supported)
Windows Server (2003 & 2008 for SMS and firewall)
RHEL5 for SMS and P-1
Solaris UltraSparc 8, 9, 10 for SMS

Front 8

What are the 5 areas that improve performance in R-70?

Back 8

New IPS inspection (better scaling)
New high-performance pattern matching (more signatures on the same protocol)
Multi-threaded to run accelerated IPS (Performance Pack)
Optimized code
Support for CoreXL

Front 9

What does CoreXL do?

Back 9

Accelerates traffic on multi-core CPUs by load sharing traffic amongst the different cores.

Front 10

What does CoreXL use to distribute traffic to multiple VPN-1 engines on multiple cores?

Back 10

load balancers.

Front 11

How are new Software Blades enabled?

Back 11

In SmartDashboard

Front 12

(T/F) Additional hardware, firmware, and drivers are necessary to enable Software Blades.

Back 12

False

Front 13

What are the 3 steps to create a system in R70?

Back 13

Chose a Security Management or Security Gateway container
Select needed Software Blades
Configure and deploy the system

Front 14

For Security Gateway systems, the number immediately following SG in the model number represents:

Back 14

the number of cores

Front 15

For Security Gateway systems, the last number in the model number represents:

Back 15

the number of Software Blades included in the bundle

Front 16

Security Gateway Series 100 is limited to ___ users, and recommended for ___ ports.

Back 16

50, 8

Front 17

Security Gateway Series 200 is limited to ___ cores, ___ users, and recommended for ___ ports.

Back 17

2, 500, 12

Front 18

Security Gateway Series 400 is limited to ___ cores, ___ users, and recommended for ___ ports.

Back 18

4, unlimited, 16

Front 19

Security Gateway Series 400 is optimized for ___ cores

Back 19

8

Front 20

What model of Security Gateway System is an ideal solution for a small office?

Back 20

Series 100

Front 21

What model of Security Gateway System is an ideal solution for mid-sized companies and offices?

Back 21

Series 200

Front 22

What model of Security Gateway System is an ideal solution for offices of any size that require high performance?

Back 22

Series 400

Front 23

What model of Security Gateway System is an ideal solution for the most demanding, highest-performing environments.

Back 23

Series 800

Front 24

If 2 numbers follow the SM in the Security Management System model number, it represents:

Back 24

the maximum number of gateways it will manage.

Front 25

If the letter U follows the SM in the Security Management System model number, it means:

Back 25

it can manage an unlimited amount of gateways.

Front 26

The number that follows SMV in the P-1 Security Management System model number represents:

Back 26

The number of domains it can manage.

Front 27

The last number in the Security Management System model number represents:

Back 27

The number of blades included in the system.

Front 28

The Security Gateway Software Blade that secures more than 200 applications, protocols, and services feature the mist adaptive and intelligent inspection technology?

Back 28

Firewall

Front 29

The Security Gateway Software Blade that provides secure connections between offices and for end users.

Back 29

IPSec VPN

Front 30

The Security Gateway Software Blade that provides the highest performing integrated intrusion protection solution with the industry's best threat covered is:

Back 30

IPS

Front 31

The Security Gateway Software Blade that provides advanced protection for the entire Web environment is:

Back 31

Web Security

Front 32

The Security Gateway Software Blade that provides best-of-breed Web filtering covering more tan 20 million sites and protects users and enterprises by restricting access to dangerous Web sites.

Back 32

URL Filtering

Front 33

The Security Gateway Software Blade that adds dynamic routing, multicast suooirt and QoS to security gateways is:

Back 33

Advanced Networking

Front 34

The Security Gateway Software Blade that addes SecureXL and ClusterXL is:

Back 34

Acceleration & Clustering

Front 35

The Security Management Software Blade that extends a browser-based view of security policies to outside groups while maintaining central policy control is:

Back 35

Management Portal

Front 36

The Security Management Software Blade that enables Check Point gateways to leverage LDAP-based user information stores, eliminating the need to maintain and synch redundant data stores is:

Back 36

User Directory

Front 37

In what year was a security Acceleration API (ClusterXL) added to provide highly optimized security processing?

Back 37

2001

Front 38

(T/F) SecureXL is only utilized in hardware.

Back 38

False. Hardware or software (Performance Pack)

Front 39

In what year was multi-nodal scalability provided when ClusterXL Load Sharing was released?

Back 39

2002

Front 40

In what year were ClusterXL enhancements made to provide multi-nodal, near-linear scalability with the VSX ClusterXL VSLS?

Back 40

2006

Front 41

In what year was CoreXL architecture developed?

Back 41

2007

Front 42

In what year was the new IPS engine and CoreXL fused with SecureXL Medium Path?

Back 42

2008

Front 43

What is the specific intent of the Medium Path in R70 Architecture?

Back 43

to address IPS and INSPECT v2 processes.

Front 44

What does the IPS engine do with first packets of a connection?

Back 44

Determine if a connection needs to be inspected.

Front 45

What does the IPS engine do with first packets of similar connections that have already been examined?

Back 45

It does not examine them for initial context.

Front 46

What happens to subsequent packets after the IPS engine determines that a connection should be inspected?

Back 46

They will be forwarded to the Medium Path

Front 47

(T/F) It is possibe to configure the number of instances and the amount of cores dedicated in any desired way

Back 47

True

Front 48

Medium Path processing is how many times faster than on the Firewall Path?

Back 48

2

Front 49

CoreXL processing is how many times faster than a single core?

Back 49

5

Front 50

How are Accelerated Path Cores allocated?

Back 50

Interface IRQ Affinity

Front 51

What queues packets to firewall instances running Firewall and Medium Paths?

Back 51

Secure Network Dispatcher