Check Point Certified Security Expert (CCSE) R81.2 Exam

Check Point Certified Security Expert (CCSE) R81.2 Exam

The Check Point Certified Security Expert (CCSE) R81.2 certification is tailored for security experts and other technical professionals who have previous training or practical experience working with Check Point Management Servers and Security Gateways operating on the Gaia operating system. This exam helps you gain expertise in:

• Utilizing the management API to modify the Security Environment.
• Implementing a Secondary Security Management Server and Distributed Log Server deployment.
• Employing advanced techniques for configuring dynamic objects, verifying accelerated policy installation, and enhancing security through HTTPS Inspection.
• Deploying various VPN solutions including Site-to-Site, Remote Access, and Mobile Access VPN.
• Optimizing traffic flow through the Security Gateway using SecureXL, CoreXL, Multi-Queue, and HyperFlow technologies.

Who should take the exam?

Before enrolling in this, it is highly recommended to have the following prerequisites:

• Proficiency in Unix-like and/or Windows operating systems
• Understanding of Networking Fundamentals
• Familiarity with Networking Security
• Knowledge of TCP/IP Networking
• Check Point Training Certification:
  • Check Point Certified Security Administrator (CCSA)

Course Outline 

The Exam covers the given topics  - 

• Identify basic interfaces used to manage the Check Point environment.
• Identify the types of technologies that Check Point supports for automation.
• Explain the purpose of the Check Management High Availability (HA) deployment.
• Identify the workflow followed to deploy a Primary and solution Secondary servers. 
• Explain the basic concepts of Clustering and ClusterXL, including protocols, synchronization, connection stickyness.
• Identify how to exclude services from synchronizing or delaying synchronization.
• Explain the policy installation flow.
• Explain the purpose of dynamic objects, updatable objects, and network feeds.
• Understand how to manage user access for internal and external users.
• Describe the Identity Awareness components and configurations.
• Describe different Check Point Threat Prevention solutions.
• Articulate how the Intrusion Prevention System is configured.
• Obtain knowledge about Check Point’s IoT Protect.
• Explain the purpose of Domain-based VPNs.
• Describe situations where externally managed certificate authentication is used.
• Describe how client security can be provided by Remote Access.
• Discuss the Mobile Access Software Blade.
• Explain how to determine if the configuration is compliant with the best practices.
• Define performance tuning solutions and basic configuration workflow.
• Identify supported upgrade and migration methods and procedures for Security Management Servers and dedicated Log and SmartEvent Servers.
• Identify supported upgrade methods and procedures for Security Gateways.