CheckPoint 156-582 Online Practice Questions and Exam Preparation

CheckPoint 156-582 Online Questions & Answers

• Question 41:

  Select the correct statement about service contracts.

  A. Valid service contracts must be stored only on the Security Gateways that have Threat Prevention blades enabled
  B. Service contracts are provided on paper only
  C. Valid service contracts are only stored and required on the Primary Security Management Server and never downloaded on any other system
  D. Valid service contracts must be stored on the Security Management Server before they can be downloaded to a Security Gateway
  D. Valid service contracts must be stored on the Security Management Server before they can be downloaded to a Security Gateway

• Question 42:

  Which of the following is NOT a way to insert fw monitor into the chain when troubleshooting packets throughout the chain?

  A. Relative position using id
  B. Absolute position
  C. Relative position using location
  D. Relative position using alias
  D. Relative position using alias

• Question 43:

  How do you verify that Proxy ARP entries are loaded into the kernel?

  A. fw ctl arp
  B. show arp dynamic all
  C. This information can be viewed in the logs, under NAT section of log, field: Proxy ARP entry
  D. fw ctl get arp list all
  A. fw ctl arp

• Question 44:

  What are two types of SAs in the VPN negotiation?

  A. IKE and VPND SA
  B. IKE SA and VPN SA
  C. IKE SA and IPsec SA
  D. VPN SA and Main SA
  C. IKE SA and IPsec SA

• Question 45:

  Is it possible to analyze ICMP packets with tcpdump?

  A. Yes, tcpdump is not limited to TCP specific issues
  B. No, use fw monitor instead
  C. No, tcpdump works from layer 4. ICMP is located in the network layer (layer 3), therefore is not applicable to this scenario
  D. No, since ICMP does not have any source or destination ports, but specification of port numbers is mandatory
  A. Yes, tcpdump is not limited to TCP specific issues

• Question 46:

  After manipulating the rulebase and objects with SmartConsole the application crashes and closes immediately. To troubleshoot, you will need to review the crash report. In which directory on the host PC will you find this report?

  A. \data\crash_report\
  B. \data\crash_report\
  C. \data\crash_report
  D. \crash_report\data\
  B. \data\crash_report\

• Question 47:

  You need to capture NAT information into packet capture, what tool is the best suitable for this task?

  A. tcpdump
  B. fw monitor
  C. cppcap
  D. fw ctl zdebug + xlate xltrc nat
  B. fw monitor

• Question 48:

  What is a primary advantage of using the fw monitor tool?

  A. It is menu-driven, making it easy to configure
  B. It can capture packets in various positions as they move through the firewall
  C. It has no negative impact on firewall performance
  D. It always captures all packets hitting the physical layer
  B. It can capture packets in various positions as they move through the firewall

• Question 49:

  How many different types of Service Requests exist?

  A. 4
  B. 2
  C. 3
  D. 5
  A. 4

• Question 50:

  Check Point provides tools and commands to help you identify issues about products and applications. Which Check Point command can help you display status and statistics information for various Check Point products and applications?

  A. cpstat
  B. CP-stat
  C. CPview
  D. fwstat
  A. cpstat