By default, the SIC certificates issued by R80 Management Server are based on the SHA-256 algorithm 1 . SHA-256 is a secure hash algorithm that produces a 256-bit digest. SHA-200, MD5, and SHA-128 are not valid algorithms for SIC certificates. References:  SHA-1 and SHA-256 certificates in Check Point Internal CA (ICA)

The answer is B because in R80 and above, more than one administrator can login to the Security Management Server with write permission at the same time. Every administrator works in a session that is independent of the other administrators.  This is called concurrent administration and it allows multiple administrators to work on the same policy package simultaneously 3 4  References:  Check Point R80.10 Concurrent Administration ,  Check Point R80.40 Security Management Administration Guide

 Alerts can be viewed in SmartView Monitor, which is a graphical tool that provides real-time information about the network and security activities, such as traffic, VPN tunnels, threats, and performance 4 .

References:  4 :  Check Point R81 Security Management Administration Guide , page 25.

The Accounting tracking option is used to monitor the amount of data that passes through a connection. When this option is enabled on a traffic rule, the involved traffic logs are updated every 10 minutes to show how much data has passed on the connection.  This information can be used for billing or auditing purposes 3 . References:  Check Point R81 Logging and Monitoring Administration Guide

 Phase 1 of the two-phase negotiation process conducted by IKE operates in  Main  mode or Aggressive mode 1 2 .  Main mode is more secure than Aggressive mode, as it protects the identities of the peers and uses six messages to establish the IKE SA 1 3 . Authentication, Quick, and High Alert are not valid modes for IKE phase 1.

References:  Understand IPsec IKEv1 Protocol ,  Internet Key Exchange for IPsec VPNs Configuration Guide ,  Internet Key Exchange

The Threat Prevention Software Blade that provides protection from malicious software that can infect your network computers is  Anti-Virus . Anti-Virus is a software blade that scans files and traffic for viruses, worms, trojans, spyware, and other malware. Anti-Virus can block or clean infected files and prevent malware outbreaks. IPS is a software blade that provides protection from network attacks and exploits. Anti-Malware is not a software blade, but rather a term that refers to any software that can detect and remove malware. Content Awareness is a software blade that provides visibility and control over data that enters or leaves the network based on file types, data types, and keywords.

References: [Anti-Virus Software Blade], [IPS Software Blade] , [What is Anti-Malware?], [Content Awareness Software Blade]

Plug-and-play (Trial) and Evaluation licenses are considered temporary because they expire after a certain period of time 3 . Plug-and-play licenses are valid for 15 days, while Evaluation licenses are valid for 30 days. References:  Check Point Licensing and Contract Operations User Guide

Each cluster, at a minimum, should have at least three interfaces 4 . These are:

A  sync interface  for synchronizing state information between cluster members.

A  cluster interface  for sending and receiving cluster control packets.

A  production interface  for handling regular traffic that passes through the cluster 4 . References:  Check Point R80.20 – How to configure Cluster firewalls – First Time Setup

Permissions and Administrators are defined on the Manage and Settings tab in SmartConsole 3 . This tab allows you to create and manage administrator accounts, roles, permissions, and authentication methods for accessing SmartConsole and other Check Point management interfaces. References:  Check Point R81 Security Management Administration Guide

The correct answer is A because the traffic from source 192.168.1.1 to www.google.com is handled by the Slow Path if the Application Control Blade on the gateway is inspecting the traffic 2 .  The Slow Path is used when traffic requires inspection by one or more Software Blades 2 .  The other paths are used for different scenarios 2 . References:  Check Point R81 Performance Tuning Administration Guide