CCSA Exam - Question 147

D. All configurations should be done through clish and expert mode should be used for Linux commands or remaining tasks. Explanation: - Clish is the default shell in Gaia and is used for most configuration tasks. It is a restrictive shell that provides a controlled environment for making configuration changes. - Expert mode is used for low-level system functions and tasks that require access to the underlying operating system. It provides a more permissive shell for advanced configurations and troubleshooting. This approach ensures that configurations are done in a secure and controlled manner while still allowing access to the full capabilities of the underlying operating system when necessary.

The correct answer is: D. All configurations should be done through clish and expert mode should be used for Linux commands or remaining tasks. Explanation: Gaia is the operating system for Check Point security appliances. It has different command-line interfaces: • clish (Command Line Shell): Used for most configurations of the Check Point system. It provides a structured and secure way to modify settings. • Expert Mode: A Linux shell (bash) that allows access to the underlying OS. It should be used for OS-level tasks, troubleshooting, or advanced configurations that cannot be done in clish. • mgmt_cli: A command-line tool used to interact with Check Point management APIs, primarily for automating security policy and object management. Since clish is the recommended interface for configuration and expert mode is for Linux-level commands, option D is correct.

Use clish for most configuration tasks, expert mode is reserved for advanced tasks and OS-level commands that require deeper access to Linux system