156-536 Check Point Certified Harmony Endpoint Specialist - R81.20 (CCES) Questions and Answers

Workarounds to computer security

Identity theft

Incorrect usernames

Weak passwords

start_web_mgmt - run in dish

start_web_mgmt - run in expert mode

web_mgmt_start - run in expert mode

web_mgmt_start - run in dish

They have unenforced protections

They have encryption issues

They do not receive FDE protections

They receive incomplete protections

The Remote Help only provides procedural information and FAQs about the Endpoint Security Client including procedure to reset password

The Remote Help tool provides

a) User Logon Pre-boot Remote Help

b) Media Encryption Remote Help

The Remote Help tool provides

a) Link to the secret location of encrypted password file

b) Key to decrypt the password file

The Remote Help tool unlocks admin accounts on SmartEndpoint

cplic print-x

show licenses all

cplic add

cplic print +x

Using Kerberos principals

Using the AD server

Using encryption keys

With the ktpass tool

Data protection includes VPN. and Firewall capabilities.

Full Disk Encryption (FDE). Media Encryption and Port Protection.

it supports SmartCard Authentication and Pre-Boot encryption.

Only OneCheck in Pre-Boot environment.

Between the Endpoint clients and the EPS

Between the Endpoint clients and the EMS

Between the Endpoint clients and the NMS

Between the Endpoint clients and the SMS

The default rule is a global rule that only applies to Computers. Rules for Users must be added manually by the administrator.

There are no rules to start with and administrators must create rules in order to deploy the capability policies, actions and behavior.

There are only rules for the Harmony Endpoint Firewall Capability. All other Capabilities only include Actions.

The default rule is a global rule which applies to all users and computers in the organization.

$FWDIR/log/Authentication.log

$FWDIR/logs/Auth.log

$UEPMDIR/logs/Authentication.log

$UEMPDlR/log/Authentication.elg

The implementation of a Secure VPN with very strong encryption will make your data invisible in cases of live internet transmission.

In Multimedia applications you do not need to implement any kind of Full disk encryption. You can use software like 7Zip in order to encrypt your data.

Any kind of data is very important and the Full Disk Encryption technic must be used with the strongest secret key possible. Your client has to use strong encryption like XTS-AES 256 bit.

Video processing is a high bandwidth application which utilizes a lot of HDD access time. You have to use a FDE algorithm with small secret key like XTS-AES 128 bit.

Anti-Ransomware, Anti-Exploit & Behavioral Guard

Anti-IPS, Anti-Firewall & Anti-Guard

Zero-Phishing, Anti-Bot& Anti-Virus

Threat Extraction, Threat-Emulation & Zero-Phishing

Cluster and Delta requests

Heartbeat and synchronization requests

Test packet and delta requests

Polling beat and delta requests

Endpoint Client release E86.26 and higher for Cloud deployments

Endpoint Client release E84.40 and higher for all deployments

Endpoint Client release E83.20 and higher for Cloud deployments

Endpoint Client release E81.20 and higher for On-premises deployments

You can enable all gateway related blades.

The administrator has to enable compliance and Network Policy Management.

Logging & Status, SmartEvent Server, and SmartEvent Correlation unit must be enabled.

The SmartEndPoint super Node on the Management.

60 milli-seconds

60 minutes

60 seconds

30 seconds

Consolidated network functions

Single policy

decentralized management

Consolidated security functions

SmartEndpoint connects to the Check Point Security Management Server (SMS)

SmartEndpoint Console connects to and manages the Endpoint Management Server (EMS)

SmartConsole connects to and manages the Endpoint Management Server (EMS)

Web Management Console for Endpoint connects to the Check Point Security Management Server

(SMS)

Temporary and erased files

All of these are protected with FDE

Erased files

Temporary files