VCEdump

156-582 Check Point Certified Troubleshooting Administrator - R81.20 (CCTA)

PDF question preview Back to product

Reading controls

Reader tools

Free demo

12 of 75 questions

Purchase the full version to unlock every question and answer.

View the full question set

Preview tools

Try Web TestEngine

Question formats

Single choice12

CheckPoint · 156-582

Free 156-582 Exam Dumps Preview

Preview real exam questions, verified answers and available explanations before choosing a study plan.

Question 1

Single choice

When is the Enable Bypass Under Load used in IPS?

A
When the threshold is reached for connections and throughput
B
When there is a problem with IPS and connectivity cannot be guaranteed
C
When the threshold is reached for CPU and memory
D
When there is an ongoing attack, the Security Gateway puts its state to maintenance mode to prevent attackers from breaching the network

Reveal answer details Close answer details

Correct answerC

Question 2

Single choice

You need to capture NAT information into packet capture, what tool is the best suitable for this task?

A
tcpdump
B
fw monitor
C
cppcap
D
fw ctl zdebug + xlate xltrc nat

Reveal answer details Close answer details

Correct answerB

Question 3

Single choice

To verify that communication is working between the Security Management Server and the Security Gateway, which service port should be checked?

A
257
B
18209
C
259
D
19009

Reveal answer details Close answer details

Correct answerA

Question 4

Single choice

How would you check the connection status of a gateway to the Log server?

A
Run netstat -anp | grep :257 in CLISH on Log server
B
Run netstat -anp | grep :257 in expert mode on Log server
C
Run netstat -anp | grep :18187 in expert mode on Log server
D
Run netstat -anp | grep :18187 in CLISH on Log server

Reveal answer details Close answer details

Correct answerB

Question 5

Single choice

Which type of NAT allows both incoming and outgoing connections?

A
Both Static and Hide NAT
B
Hide NAT
C
Static NAT
D
Port NAT

Reveal answer details Close answer details

Correct answerC

Question 6

Single choice

Check Point's self-service knowledge base of technical documents and tools covers everything from articles describing how to fix specific issues, understand error messages and to how to plan and perform product installation and upgrades. This knowledge base is called:

A
SupportCenterBase
B
SecureDocs
C
SupportDocs
D
SecureKnowledge

Reveal answer details Close answer details

Correct answerD

Question 7

Single choice

What is the difference between the "Super User" and "Read Write All" SmartConsole permission profiles?

A
"Read Write All" has the extra ability to make changes within the Gaia operating system
B
"Super User" has the extra ability to administer other administrative accounts
C
"Super User" has the extra ability to make changes within the Gaia operating system
D
"Super User" had the extra ability of being able to use the Management API

Reveal answer details Close answer details

Correct answerC

Question 8

Single choice

After deploying a Hide NAT for a new network, users are unable to access the Internet.

What command would you use to check the internal NAT behavior?

A
cp ctl kdebug + xlate xltrc nat
B
fw ctl zdebug + xlate xltrc nat
C
cp ctl zdebug + xlate xltrc nat
D
fw ctl kdebug + xlate xltrc nat

Reveal answer details Close answer details

Correct answerB

Question 9

Single choice

Services with expired licenses and contracts have,

A
full functionality for 90 days after they expire
B
full functionality for 45 days after they expire
C
no functionality
D
limited functionality

Reveal answer details Close answer details

Correct answerD

Question 10

Single choice

You were asked to set up logging for a rule to log a full list of URLs when the rule hits in the Rule Base.

How do you accomplish that?

A
Set Extended logging under rule log type
B
Click on the rule, column logging and set "log URL" under application control blade layer
C
All URLs are logged by default
D
For URL logging you need to modify blade settings of URL filtering blade under SmartConsole, Manage & Settings, blades, URL filtering

Reveal answer details Close answer details

Correct answerA

Question 11

Single choice

Which of the following is a valid way to capture packets on Check Point gateways?

A
Firewall logs
B
Wireshark
C
tcpdump
D
Network taps

Reveal answer details Close answer details

Correct answerC

Question 12

Single choice

Which of the following would be the most appropriate command in debugging a HideNAT issue?

A
fw ctl zdebug + fwn allnat
B
fw ctl zdebug + dynamic natips natports
C
fw ctl zdebug + xlate xltrc nat
D
fw ctl zdebug + fwxalloc hidenat

Reveal answer details Close answer details

Correct answerC

Free 156-582 Exam Dumps Preview

Check Point Certified Troubleshooting Administrator - R81.20 (CCTA)

PREVIEW CONTENTS · 1 VOLUME

QUESTION 1

QUESTION 2

QUESTION 3

QUESTION 4

QUESTION 5

QUESTION 6

QUESTION 7

QUESTION 8

QUESTION 9

QUESTION 10

QUESTION 11

QUESTION 12