CheckPoint 156-582 Online Practice Questions and Exam Preparation

CheckPoint 156-582 Online Questions & Answers

• Question 1:

  What file extension should be used with fw monitor to allow the output file to be imported and read in Wireshark?

  A. .pea
  B. .exe
  C. .cap
  D. .tgz
  C. .cap

• Question 2:

  You tested the connection from source to destination and you are not able to find logs in your Security Management. What is the best possible reason?

  A. The FWM process crashed on Security Management, therefore logging will not work.
  B. There is not enough storage in Security Management, so the logs can't be stored.
  C. The logging blade was not enabled on Security Gateway.
  D. The gateway is logging locally.
  C. The logging blade was not enabled on Security Gateway.

• Question 3:

  Which of the following is true about tcpdump?

  A. The tcpdump can only capture TCP packets and not UDP packets
  B. A tcpdump session can be initiated from the SmartConsole
  C. The tcpdump has to be run from clish mode in Gaia
  D. Running tcpdump without the correct switches will negatively impact the performance of the Firewall
  D. Running tcpdump without the correct switches will negatively impact the performance of the Firewall

• Question 4:

  What is the name of a protocol for VPN establishment and negotiation?

  A. NAT-T
  B. IPsec
  C. VPN
  D. IKE
  D. IKE

• Question 5:

  How many captures does the command "fw monitor -p all" take?

  A. All 15 of the inbound and outbound modules
  B. The -p option takes the same number of captures, but gathers all of the data packet
  C. 1 from every inbound and outbound module of the chain
  D. All 4 points of the fw VM modules
  A. All 15 of the inbound and outbound modules

• Question 6:

  For Threat Prevention, which process is enabled when the Policy Conversion process has debug turned on using the INTERNAL_POLICY_LOADING=1 command?

  A. fwm
  B. cpm
  C. solr
  D. dlpd
  A. fwm

• Question 7:

  When accessing License Status In Smart Console, what information is available?

  A. Blade Name, License Status, Expiration Date, Additional info
  B. Expiration Date, Status, SKU, Signature Key
  C. Blade Name, Expiration Date, Attached to, Status
  D. License Status, Blade Name, Report available, Download
  C. Blade Name, Expiration Date, Attached to, Status

• Question 8:

  Services with expired licenses and contracts have,

  A. full functionality for 90 days after they expire
  B. full functionality for 45 days after they expire
  C. no functionality
  D. limited functionality
  D. limited functionality

• Question 9:

  What is the most efficient way to view large fw monitor captures and run filters on the file?

  A. snoop
  B. CLI
  C. CLISH
  D. Wireshark
  D. Wireshark

• Question 10:

  You want to print the status of WatchDog-monitored processes. What command best meets your needs?

  A. cpwd_admin list
  B. tcpdump
  C. cppcap
  D. cpplic print
  A. cpwd_admin list