최신 156-581 무료덤프 - CheckPoint Check Point Certified Troubleshooting Administrator

문제1

Is it possible to analyze ICMP packets with tcpdump?

A. No, use fw monitor instead

B. No, tcpdump works from layer 4. ICMP is located in the network layer (layer 3), therefore is not applicable to this scenario

C. Yes, tcpdump is not limited to tcp specific issues

D. No, since ICMP does not have any source or destination ports, but specification of port numbers is mandatory

정답: D

문제2

One of most common reasons that firewall administrator couldn't login anymore into a newly installed R80.x Security Management via SmartConsole is, that the 15-day trial license was expired. How can the firewall administrator install a valid license on the security management, if he only has access to the management via SmartConsole or via Gaia Portal?

A. The Firewall administrator should run GuidBedit.exe, located in \, login and install the valid license on management server

B. The Firewall administrator should run SmartDistributor.exe, located in, login and install the valid license on management server.

C. The Firewall administrator should run SmartProvider.exe, located in, login and install the valid license on management server.

D. The Firewall administrator should run SmartUpdate.exe, located in \bin\, login and install the valid license on management server.

정답: D

문제3

Which command do you need to execute to insert fw monitor after TCP streaming (out) in the outbound chain using absolute position? Given the chain was 1ffffe0, select the correct answer.

A. fw monitor -pO -ox1ffffe0

B. fw monitor -po -0x1ffffe0

C. fw monitor -po 1ffffe0

D. fw monitor -pO ox1ffffe0

정답: B

문제4

After deploying a new Static NAT configuration, traffic is not getting through.
What command would you use to troubleshoot internal problems with the NAT traffic?

A. fw ctl kdebug + xlate xltrc nat

B. cp ctl kdebug + xlate xltrc nat

C. cp ctt zdebug + xlate xltrc nat

D. fw ctl zdebug + xlate xltrc nat

정답: D

문제5

Which of the following is true about tcpdump?

A. Running tcpdump without the correct switches will negatively impact the performance of the Firewall

B. The tcpdump has to be run from Cish mode in Gaia

C. The tcpdump can only capture TCP packets and not UDP packets

D. A tcpdump session can be initiated from the SmartConsole

정답: A

문제6

Which of the following is a valid way to capture general packets on Check Point gateways?

A. Wireshark

B. tcpdump

C. Firewall logs

D. Network taps

정답: B

문제7

Which if the following is NOT an account user classification?

A. Licensers

B. Manager

C. Administrator

D. Viewer

정답: B

문제8

Which of these would be the best way to alter the chain insertion point of fw monitor"?

A. Changing its settings in dbedit or Guldbedit

B. Using the "-p" parameter in the command line

C. Setting the "monitor" parameter with "fw ctl chain"

D. Altering the "monitor" value in kernel parameters

정답: B

문제9

Which of the following is a valid way to capture general packets on Check Point gateways?

A. Wireshark

B. tcpdump

C. Firewall logs

D. Network taps

정답: B

최신 156-581 무료덤프 - CheckPoint Check Point Certified Troubleshooting Administrator - R81

우리와 연락하기

유용한 링크

최신 업데이트