Select the correct statement about Secure Internal Communications (SIC) Certificates. SIC Certificates:

• A. Increase network security by securing administrative communication with a two-factor challenge response authentication.
• B. Are for Security Gateways created during the Security Management Server installation.
• C. Can be used for securing internal network communications between the Security Gateway and an OPSEC device.
• D. Uniquely identify machines installed with Check Point software only. They have the same function as RSA Authentication Certificates.

Your company has two headquarters, one in London, one in New York. Each of the headquarters includes several branch offices. The branch offices only need to communicate with the headquarters in their country, not with each other, and the headquarters need to communicate directly. What is the BEST configuration for establishing VPN Communities among the branch offices and their headquarters, and between the two headquarters? VPN Communities comprised of:

• A. Two mesh and one star Community: Each mesh Community is set up for each site between headquarters their branches. The star Community has New York as the center and London as its satellite.
• B. Three star Communities: The first one is between New York headquarters and its branches. The second star Community is between London headquarters and its branches. The third star Community is between New York and London headquarters but it is irrelevant which site is "center" and which "satellite".
• C. One star Community with the option to mesh the center of the star: New York and London Gateways added to the center of the star with the "mesh center Gateways" option checked; all London branch offices defined in one satellite window; but, all New York branch offices defined in another satellite window.
• D. Three mesh Communities: one for London headquarters and its branches; one for New York headquarters and its branches; and one for London and New York headquarters.

If you run fw monitor without any parameters, what does the output display?

• A. In / var/log/monitor. out
• B. In /var/adm/monitor. Out
• C. On the console
• D. In /tmp/log/monitor - out

You are the Security Administrator for MegaCorp and are enjoying your holiday. One day, you receive a call that some connectivity problems have occurred. Before the holiday, you configured the access from the holiday hotel to your Management Portal. You can see and analyze various objects. Which objects can you create?

• A. Security rules only
• B. Network objects and services
• C. None. SmartPortal access is read-only.
• D. Network objects, services and internal users

You have configured Automatic Static NAT on an internal host-node object. You clear the box Translate destination on client site from Global Properties / NAT. Assuming all other NAT settings in Global Properties are selected, what else must be configured so that a host on the Internet can initiate an inbound connection to this host?

• A. A static route, to ensure packets destined for the public NAT IP address will reach the Gateway's internal interface.
• B. No extra configuration is needed
• C. A proxy ARP entry, to ensure packets destined for the public IP address will reach the Security Gateway's external interface.
• D. The NAT IP address must be added to the anti-spoofing group of the external gateway interface