156-581試験無料問題集（93題）「CheckPoint Check Point Certified Troubleshooting Administrator

出題：1

What are the available types of licenses in Check Point?

A. Annual, Perpetual, Test, Free

B. Evaluation, Perpetual, Trial, Subscription

C. Free, Evaluation, Annual, Lifetime

D. Evaluation, Perpetual Test, Free

正解：B 解答を投票する

出題：2

Application Control and URL Filtering update files are located in which directory?

A. $FWDIR/conf/update

B. $CPDIR/apci/update

C. $FWDIR/appi/update/

D. $CPDIR/appi/update

正解：C 解答を投票する

出題：3

Which of the following allows you to capture packets at four inspection points as they traverse a Check Point gateway?

A. Firewall logs

B. Kernel debugs

C. fw monitor

D. tcpdump

正解：C 解答を投票する

出題：4

Which of these would be the best way to alter the chain insertion point of fw monitor"?

A. Using the "-p" parameter in the command line

B. Changing its settings in dbedit or Guldbedit

C. Altering the "monitor" value in kernel parameters

D. Setting the "monitor" parameter with "fw ctl chain"

正解：A 解答を投票する

出題：5

Performing NAT on the Client Side means that translation of all packets will occur?

A. After the packets have already been routed

B. In the inbound firewall kernel instance

C. In the firewall kernel closest to the initiator of the connection

D. Prior to any routing taking place

正解：D 解答を投票する

出題：6

What process is used to stop a packet at a specified point during its flow and store it in order to examine its contents and resolve issues that may have occurred during inspection?

A. Logging

B. Debugging

C. Packet Capturing

D. Forensics Analysis

正解：C 解答を投票する

出題：7

What process(es) should be checked if there is high I/O and you suspect it may be related to the Antivirus Software Blade?

A. cpm and fwm

B. dlpu and rad processes

C. avsp

D. cpta

正解：B 解答を投票する

出題：8

How can a firewall admin check if the logs are coming from Security Gateway Cluster to Management Server?

A. fw monitor -e 'accept host(p_address of GW) and dport=2571"

B. tcpdump -ni interface_pointing_from_Gateway tcp port 257

C. tcpdump -ni interface_pointing_to_Gateway tcp port 257

D. fw monitor -e 'accept host(ip_address of GW) and spon=257"

正解：B 解答を投票する

出題：9

Which would be a good reason to let "fw monitor' display results to the console, rather the output to a file?

A. You only need quick. simplified results

B. You would like to save system resources

C. You want to review full traffic details at a later time

D. You would like to search results for specific reasons for dropping traffic

正解：A 解答を投票する

156-581試験無料問題集「CheckPoint Check Point Certified Troubleshooting Administrator - R81 認定」