Stateful Inspection compiles and registers connections in the State Table. The State Table is a

database that stores information about active connections and sessions on the Security Gateway. The

other options are not valid names for the database that stores connection information.

Reference: 1: Policy Types 2: CPUSE 3: SIC : [Software Containers] : [Stateful Inspection]

The pre-defined Roles included in Gaia OS are AdminRole and MonitorRole. AdminRole is the role

that has full access to all Gaia features and commands. MonitorRole is the role that has read-only

access to Gaia features and commands1. The other options are not valid pre-defined Roles in Gaia

OS.

The User Directory is used to obtain identification and security information about network users. It

can be integrated with external user databases such as LDAP, RADIUS, or

TACACS+. Reference: Certified Security Administrator (CCSA) R81.20 Course Overview, page 9.

Log query results can be exported to Comma Separated Value (csv) file format. CSV is a file format

that stores tabular data in plain text. It is compatible with various applications, such as Excel, Google

Sheets, etc. The other options are not valid file formats for exporting log query results.

Reference: 1: Gaia Roles 2: Gaia Default Users 3: Anti-Virus : [Exporting Logs]

One limitation of using Security Zones in the network is that Security Zones will not work in Manual

NAT rules. Manual NAT rules are rules that explicitly define how to translate the source and

destination IP addresses and ports of each connection. Manual NAT rules do not support using

Security Zones as objects, only network objects or groups. Automatic NAT rules are rules that

automatically define how to translate the source and destination IP addresses and ports of each

connection based on the network objects or groups properties. Automatic NAT rules support using

Security Zones as objects. Security Zones can also work in firewall policy layer and network topology.

Reference: [Security Zones Best Practices], [NAT Methods]

Security Zones are a feature of Application Control and Identity Awareness that allow you to define

groups of network objects based on their level of trust. Security Zones do not work with Manual NAT

rules, because Manual NAT rules are applied before the Application Control and Identity Awareness

policy is enforced1. Reference: Check Point R81 Security Management Administration Guide

Snapshot is the backup utility that captures the most information and tends to create the largest

archives. Snapshot creates an image of the entire system, including operating system files,

configuration files, databases, and logs. It can be used to restore the system in case of a failure or

corruption. Backup creates a compressed file that contains configuration files and databases, but not

operating system files or logs. It can be used to restore configuration settings and policies. Database

Revision creates a backup of only the database files that store policies and objects. It can be used to

revert to a previous revision of the database. Migrate export creates a compressed file that contains

configuration files, databases, and logs, but not operating system files. It can be used to migrate data

from one machine to another with different hardware or software versions.

Reference: [Backup and Restore], [Database Revision Control], [Migrate Tools], [Hewlett Packard

Enterprise Support Center]

The answer is A because an identity server uses a shared secret for user authentication. A shared

secret is a passphrase that is known by both the identity server and the user. The identity server

sends a challenge to the user, who encrypts it with the shared secret and sends it back. The identity

server then verifies the response and authenticates the user12 Reference: Check Point R81 Identity

Awareness Administration Guide, Check Point R81 Identity Server

The two ordered layers that make up the Access Control Policy Layer are Network and Threat

Prevention. Network layer contains rules that define how traffic is inspected and handled by the

Security Gateway. Threat Prevention layer contains rules that define how traffic is inspected by the

Threat Prevention Software Blades2. Reference: Check Point R81 Security Management

Administration Guide

Browser-based Authentication sends users to a web page to acquire identities using Captive Portal

and Transparent Kerberos Authentication. Captive Portal is a web page that prompts users to enter

their credentials. Transparent Kerberos Authentication is a method that automatically authenticates

users who have a valid Kerberos ticket from the Active Directory domain controller2. UserCheck is a

feature that allows users to interact with the security policy, not a method of authentication. User

Directory is a component that integrates with external user databases, not a web page for

authentication. Captive Portal alone is not enough to fill in the blank, as it is only one of the methods

used by Browser-based Authentication.