Only one user can have read/write access in Gaia Operating System at one time 2 . This is to prevent conflicts and errors when multiple users try to modify the same configuration settings. References:  Check Point Gaia Administration Guide

 To use Application objects in a rule, the “Applications & URL Filtering” blade should be enabled on the policy layer where the rule is being created.  Enabling the “Application Control” blade on a gateway is not enough 3 .

References:  3 :  Check Point R81 Security Management Administration Guide , page 102.

The command that shows the installed licenses in Expert mode is cplic print.  This command displays information about the licenses that are installed on the local machine or a remote machine 1 .  The other commands are not valid for showing licenses in Expert mode. 

The type of NAT that is a one-to-one relationship where each host is translated to a unique address is Static NAT.  Static NAT maps an unregistered IP address to a registered IP address on a one-to-one basis 3 .  This means that for each internal host, there is a corresponding external address that represents it 3 . Therefore, the correct answer is B

The command that shows the installed licenses is  cplic print . This command displays the license information on a Check Point server or Security Gateway. It shows the license type, expiration date, attached blades, etc. The other options are incorrect.  print cplic  is not a valid command.  fwlic print  is not a valid command.  show licenses  is not a valid command. References: [How to check license status on SecurePlatform / Gaia from CLI]

When tunnel test packets no longer invoke a response, SmartView Monitor displays  Down  for the given VPN tunnel 1 . This means that the VPN tunnel is not operational and there is no IKE or IPsec traffic passing through it. No Response, Inactive, and Failed are not valid statuses for VPN tunnels in SmartView Monitor. References:  Smart View Monitor displays status for all S2S VPN tunnels - Phase1 UP

Anti-Virus is the Check Point software blade that prevents malicious files from entering a network using virus signatures and anomaly-based protections from ThreatCloud. Anti-Virus scans files and email attachments for viruses, worms, trojans, and other types of malware. It also uses ThreatCloud, a collaborative network that delivers real-time dynamic security intelligence, to detect unknown malware based on their behavior. Firewall is a software blade that enforces security policy by inspecting and controlling network traffic. Application Control is a software blade that enables administrators to control access to web applications. Anti-spam and Email Security is a software blade that protects email infrastructure from spam, phishing, and malware attacks.

The licensing feature that is used to verify licenses and activate new licenses added to the License and Contracts repository is Automatic licensing and Verification tool 1 , p. 8. Automatic licensing is a feature that allows the Security Management Server to automatically attach licenses to Security Gateways.  Verification tool is a feature that allows the Security Management Server to verify the validity of licenses and contracts 2 . References:  Check Point CCSA - R81: Practice Test & Explanation ,  Check Point Licensing and Contract Administration Guide R81

A main component of the Check Point security management architecture is  SmartConsole 2 . SmartConsole is a unified graphical user interface that allows administrators to manage multiple security functions such as firewall, VPN, IPS, application control, URL filtering, identity awareness, and more. SmartConsole connects to the Security Management Server and interacts with other Check Point components such as Security Gateways and Endpoint Security Servers. References:  Check Point R81 Security Management Administration Guide

The correct answer is A because the fwd daemon is responsible for the FW CLI commands 3 . The fwm daemon handles the communication between the Security Management server and the GUI clients. The cpm daemon handles the communication between the Security Management server and SmartConsole. The cpd daemon monitors the status of critical processes on the Security Gateway. References:  Check Point Firewall Processes and Daemons