CheckPoint 156-582 Online Practice Questions and Exam Preparation

CheckPoint 156-582 Online Questions & Answers

• Question 1:

  For Threat Prevention, which process is enabled when the Policy Conversion process has debug turned on using the INTERNAL_POLICY_LOADING=1 command?

  A. fwm
  B. cpm
  C. solr
  D. dlpd
  A. fwm

• Question 2:

  What is the name of the Software Blade Package containing CDR (Content Disarm and Reconstruction) and Zero Day protection?

  A. TE - Threat Emulation
  B. SNBT - Sandblast
  C. NGTX - Next Generation Threat Prevention and Extraction
  D. NGTP - Next Generation Threat Prevention
  C. NGTX - Next Generation Threat Prevention and Extraction

• Question 3:

  After manipulating the rulebase and objects with SmartConsole the application crashes and closes immediately. To troubleshoot, you will need to review the crash report. In which directory on the host PC will you find this report?

  A. \data\crash_report\
  B. \data\crash_report\
  C. \data\crash_report
  D. \crash_report\data\
  B. \data\crash_report\

• Question 4:

  Which of the following CLI commands is best to use for getting a quick look at appliance performance information in Gaia?

  A. fw stat
  B. fw monitor
  C. cpview
  D. cphaprob stat
  C. cpview

• Question 5:

  What file extension should be used with fw monitor to allow the output file to be imported and read in Wireshark?

  A. .pea
  B. .exe
  C. .cap
  D. .tgz
  C. .cap

• Question 6:

  Application Control and URL Filtering update files are located in which directory?

  A. SCPDIR/appi/update
  B. SFWDIR/conf/update
  C. SCPDIR/apci/update
  D. SFWDIR/appi/update/
  D. SFWDIR/appi/update/

• Question 7:

  Which is the correct "fw monitor" syntax for creating a capture file for loading it into Wireshark?

  A. fw monitor -e "accept
  B. This cannot be accomplished as it is not supported with R80.10
  C. fw monitor -e "accept
  D. fw monitor -e "accept
  D. fw monitor -e "accept

• Question 8:

  How would you check the connection status of a gateway to the Log server?

  A. Run netstat -anp | grep :257 in CLISH on Log server
  B. Run netstat -anp | grep :257 in expert mode on Log server
  C. Run netstat -anp | grep :18187 in expert mode on Log server
  D. Run netstat -anp | grep :18187 in CLISH on Log server
  B. Run netstat -anp | grep :257 in expert mode on Log server

• Question 9:

  You tested the connection from source to destination and you are not able to find logs in your Security Management. What is the best possible reason?

  A. The FWM process crashed on Security Management, therefore logging will not work.
  B. There is not enough storage in Security Management, so the logs can't be stored.
  C. The logging blade was not enabled on Security Gateway.
  D. The gateway is logging locally.
  C. The logging blade was not enabled on Security Gateway.

• Question 10:

  In the Security Management Architecture, what port and process SmartConsole uses to communicate with the management server?

  A. CPM 19009 and 18191
  B. CPM and 18190
  C. CPM and 19009
  D. FWM and 19009
  C. CPM and 19009