CheckPoint
156-590
Q1:
Which location is NOT able to create a Threat Prevention Exception?
○
A
Policy Rule○
B
Log Overview○
C
Log Details○
D
SmartView
CheckPoint
156-590
Q2:
Where is IPS primarily enforced?
○
A
Post-infection○
B
Post-inspection○
C
Pre-infection○
D
Pre-inspection
CheckPoint
156-590
Q3:
Which is NOT true of Threat Prevention policy application?
○
A
Only applied after traffic is accepted by Access Control Policy○
B
Traffic is matched against all applicable layers at the same time○
C
Only applies first matched rule○
D
Applied as ordered layer
CheckPoint
156-590
Q4:
What is the impact of changing the Preconfigured Threat Prevention Profiles?
○
A
The best practice for all Check Point delivered profiles and object is to first clone them and work on the clones.○
B
The impact is minimum if you first delete all of them and then build them from scratch.○
C
The impact can be minimized if you use the performance check tool. You can enable it in IPS protections -> actions -> Run Protection performance check tool.○
D
There is no performance or security impact in changing the Preconfigured Profiles.
CheckPoint
156-590
Q5:
What is the correct action to exclude one or more Threat Prevention Blades in a Blade exception rule?
○
A
'inactive'○
B
'ignore'○
C
'Ask user'○
D
'bypass'