Exam 156-210.4:
Check Point NG with Application Intelligence - Management I ( CheckPoint CCSA )

• Describe the purpose of a firewall
• Describe and compare firewall architecture
• Identify the different components of VPN-1/FireWall-1 NG in Checkpoint CCSA
• Explain the function and operation of a Security Policy
• Demonstrate the creation of network objects and groups using the SmartDashboard
• In CheckPoint CCSA we Demonstrate the setup of anti-spoofing on the firewall
• Demonstrate the setup and operation of an active Security Policy
• Demonstrate how to hide and unhide rules, view hidden rules, define a rule mask, and apply a
  rule mask in CCSA
• Show how to install and uninstall a Security Policy in CheckPoint
• List the guidelines for improving VPN-1/FireWall-1 NG performance using a Security Policy
• Identify the three display modes of the Checkpoint SmartView Tracker
• Identify and define checkpoint SmartView Status Icons
• Specify selection criteria and save log files in CCSA
• Describe the steps needed to block an intruder in Checkpoint
• List three blocking scope options and their uses
• Describe how block request is used
• Understand Application Intelligence technologies of Checkpoint.
• Understand active-defense technologies
• Configure VPN-1/FireWall-1 NG, to block common categories of attacks in CheckPoint NG AI
• Enable SmartDefense global protection mechanisms in CCSA
• Monitor the Security Policy with the SmartView Status
• Demonstrate how to implement authentication
• Demonstrate the process for creating users and groups
• Demonstrate the setup of authentication parameters
• Demonstrate how to implement User Authentication using various authentication schemes
• List types of services supported by VPN-1/FireWall-1 NG requiring username and password
• Demonstrate how to implement Client Authentication in CCSA
• Demonstrate how to implement Session Authentication
• List the reasons and methods for Network Address Translation
• Demonstrate how to set up Static NAT in Checkpoint
• Demonstrate how to set up Hide NAT in Checkpoint
• Describe basic network configurations using NAT in all modes of ChecKpoint
• Describe the process of protecting your protected network with backups
• Install and upgrade the VPN-1/FireWall-1 NG software in CCSA NG AI
• Describe the process of licensing VPN-1/FireWall-1 NG
• Describe how VPN-1/FireWall-1 NG licensing works