CheckPoint 156-582 Online Practice Questions and Exam Preparation

CheckPoint 156-582 Online Questions & Answers

• Question 11:

  You were asked to set up logging for a rule to log a full list of URLs when the rule hits in the Rule Base. How do you accomplish that?

  A. Set Extended logging under rule log type
  B. Click on the rule, column logging and set "log URL" under application control blade layer
  C. All URLs are logged by default
  D. For URL logging you need to modify blade settings of URL filtering blade under SmartConsole, Manage and Settings, blades, URL filtering
  A. Set Extended logging under rule log type

• Question 12:

  What is the port for the Log Collection on Security Management Server?

  A. 18191
  B. 443
  C. 258
  D. 257
  D. 257

• Question 13:

  Application Control and URL Filtering update files are located in which directory?

  A. SCPDIR/appi/update
  B. SFWDIR/conf/update
  C. SCPDIR/apci/update
  D. SFWDIR/appi/update/
  D. SFWDIR/appi/update/

• Question 14:

  In the Security Management Architecture, what port and process SmartConsole uses to communicate with the management server?

  A. CPM 19009 and 18191
  B. CPM and 18190
  C. CPM and 19009
  D. FWM and 19009
  C. CPM and 19009

• Question 15:

  The Check Point FW Monitor tool captures and analyzes incoming packets at multiple points in the traffic inspections. Which of the following is the correct inspection flow for traffic?

  A. (i) - pre-inbound, (I) - post-inbound, (o) - pre-outbound, (O) - post-outbound
  B. (o) - pre-outbound, (O) - post-inbound, (i) - pre-inbound, (I) - post-inbound
  C. (O) - post-outbound, (o) - pre-outbound, (I) - post-inbound, (i) - pre-inbound
  D. (1) - pre-inbound, (i) - post-inbound, (O) - pre-outbound, (o) - post-outbound
  A. (i) - pre-inbound, (I) - post-inbound, (o) - pre-outbound, (O) - post-outbound

• Question 16:

  When is the Enable Bypass Under Load used in IPS?

  A. When the threshold is reached for connections and throughput
  B. When there is a problem with IPS and connectivity cannot be guaranteed
  C. When the threshold is reached for CPU and memory
  D. When there is an ongoing attack, the Security Gateway puts its state to maintenance mode to prevent attackers from breaching the network
  C. When the threshold is reached for CPU and memory

• Question 17:

  What is the name of the Software Blade Package containing CDR (Content Disarm and Reconstruction) and Zero Day protection?

  A. TE - Threat Emulation
  B. SNBT - Sandblast
  C. NGTX - Next Generation Threat Prevention and Extraction
  D. NGTP - Next Generation Threat Prevention
  C. NGTX - Next Generation Threat Prevention and Extraction

• Question 18:

  You need to verify the license on Security Gateway. What command can you use from the command line?

  A. cplic -I
  B. cplic print
  C. cplic list
  D. sh lie stat
  B. cplic print

• Question 19:

  Which of the following would be the most appropriate command in debugging a HideNAT issue?

  A. fw ctl zdebug + fwn allnat
  B. fw ctl zdebug + dynamic natips natports
  C. fw ctl zdebug + xlate xltrc nat
  D. fw ctl zdebug + fwxalloc hidenat
  C. fw ctl zdebug + xlate xltrc nat

• Question 20:

  As a security administrator/engineer in your company, you have noticed that your HQ Check Point Security Management Server is not receiving logs from your HQ Check Point Gateway/Cluster. To investigate this issue in the command line, you will need to verify which process is running?

  A. cpm
  B. cpd
  C. fwd
  D. fwm
  C. fwd