Check Point Chapter 1

Front 1

What is the responsibility of Access Control?

Back 1

Determining how and what resources can be accessed

Front 2

What is the respocibility of User authentication?

Back 2

Determine who has access to recourses

Front 3

A Check Point Security Gateway at the boundary of a network does what?

Back 3

Inspect and provides access control for all gateway traffic.

Front 4

What is SmartDashboard?

Back 4

A SmartConsole client application tat admins use to define and apply security policies to gateways

Front 5

Stateful Packet Inspection provides what?

Back 5

Full application level awareness and comprehensive access control for more the 150 predefined application, services,and protocols as well as the ability to specify and define custom services

Front 6

What are the 7 layers of the OSI Model?

Back 6

1) physical
2) data-link
3) network
4)transport
5)session
6)presentation
7)application

Front 7

What is represented in the physical layer of the OSI model?

Back 7

Physical media (ether net cards, cables, and hubs)

Front 8

What is represented at the data link layer of the OSI Model?

Back 8

Network traffic is delivered to LANs

Front 9

What is represented at the Network layer of the OSI model?

Back 9

Data transmitted over WANs more commonly the internet.

Front 10

What is represented at the transport layer of the OSI model?

Back 10

specific network applications and communication sessions are indenified

Front 11

What is represented in the Session, Presentation and Application layers of the OSI Model?

Back 11

End User systems and applications

Front 12

What technologies does Check Point use to grant or deny traffic?

Back 12

1) Packet Filtering
2) Stateful Inspection
3) Application Intelligence

Front 13

What is the most basic form of a firewall?

Back 13

Packet Filter

Front 14

What layers of the OSI model do most packet filters work at?

Back 14

Layer 3 and Layer 4

Front 15

What is the typical rule base going to include?

Back 15

1) source address
2) destination address
3) source port
4) destination port
5) Protocol

Front 16

What does Stateful inspection add to a normal firewall?

Back 16

Level 4 awareness

Front 17

What is the major difference between stateful packet inspection and standard packet filtering?

Back 17

Stateful looks at the entire content as well as the packet header when deciding what to do with a packet.

Front 18

What command do you use to see a list of state tables in the Check Point CLI?

Back 18

fw tab -s

Front 19

What is the purpose of the INSPECT Engine?

Back 19

used to extract state related information for all application layers and maintinas this information in these synamic state tables needed for evaluating toher connections, The INSPECT Engine enforces security policies on the security gateway they reside on.

Front 20

What is Application Intelligence?

Back 20

Advanced capabilities, integrated into the firewall and IPS. These detect and prevent application level attacks.

Front 21

What is an example of a layer 6 (presentation) protocol?

Back 21

HTTP,FTP,SMTP

Front 22

What is example of a layer 4 (transport) protocol?

Back 22

TCP,UDP

Front 23

What is an example of a layer 3 (network) Protocol?

Back 23

IP

Front 24

What is an example of a layer 2 (data link) protocol?

Back 24

Ethernet

Front 25

What is a Rule Base?

Back 25

A collection of individual rules that determine your security policy.

Front 26

What does bridging mode allow for?

Back 26

placement of a security gateway with out having to change the existing IP routing.

Front 27

What are the four most critical layers of network security?

Back 27

network perimeter, network core, the web and the end point.

Front 28

What is the SmartDashboards purpose?

Back 28

Provide a comprehensive user interface for defining and managing multiple elements of the security policy.

Front 29

What does SmartDashboard allow you to define security policies for?

Back 29

Network Object (i.e hosts, networks, and gateways.)

Front 30

What is the SmartMap?

Back 30

A security policy visualization tool that provides a detailed map of an organization's security deployment.

Front 31

What is the SmartView Tracker?

Back 31

Tool used for managing and tracking logs and alerts. It provides these in realtime

Front 32

What does SmartPortal allow?

Back 32

Web based administration of security management server

Front 33

What does SmartView Monitor provide?

Back 33

A cetnral interface for monitoring network activity and the performance of check point applications.

Front 34

What does the Eventia reporter provide?

Back 34

A tool to analyze and audit traffic.

Front 35

Eventia Analyzer provides what function?

Back 35

Centralized realtime event correlation and management if log data for all check point products as well as third part firewalls router switches intrusion detection systems operating systems applications and webservers.

Front 36

What does SmartProvisioning Provide?

Back 36

centeralized administration and provisioning of Check Point security devices via a single management console.

Front 37

What is SmartUpdate tool used for?

Back 37

Manage and maintain a license repository as well as to facilitate upgrading Check Point software.

Front 38

What role does the Security Manager Server play?

Back 38

Manage the security policy.

Front 39

What is a Permission Profile?

Back 39

A permission ID card which is assigned to Admins or Admin groups.

Front 40

What is SIC and What messures are taken to ensure the safety of SIC?

Back 40

Secure Internal Communications
1) Certificates for authentication
2) Standard-based SSL for the creation of the secure channel.
3) 3DES for encrytion

Front 41

What 3 things does the Internal Certificate Authority (ICA) provide Certificates for?

Back 41

1) SIC
2) VPN Certificated for gateways
3) Users