CheckPoint 156-582 Online Practice Questions and Exam Preparation

CheckPoint 156-582 Online Questions & Answers

• Question 51:

  You want to collect diagnostics data to include with an SR (Service Request). What command or utility best meets your needs?

  A. cpconfig
  B. cpinfo
  C. cpplic
  D. contracts_mgmt
  B. cpinfo

• Question 52:

  You need to switch the active log file on the Security Gateway. What is the correct command?

  A. fw -p -o switch
  B. fw logswitch
  C. Install security policy
  D. fw switchlog
  B. fw logswitch

• Question 53:

  What is the process of intercepting and logging traffic?

  A. Debugging
  B. Forensics Analysis
  C. Logging
  D. Packet Capturing
  D. Packet Capturing

• Question 54:

  Running tcpdump causes a significant increase on CPU usage, what other option should you use?

  A. fw monitor
  B. Wait for out of business hours to do a packet capture
  C. cppcap
  D. You need to use tcpdump with -e option to decrease the length of packet in captures and it will utilize the less CPU
  C. cppcap

• Question 55:

  What is the correct process for GUI connectivity issues with SmartConsole troubleshooting?

  A. Processes (FWM and CPM), Connectivity, GUI clients, Certificate, Authentication
  B. First troubleshoot Authentication and then the rest
  C. Reinstall the SmartConsole and check if it's running properly
  D. Connectivity, Processes (FWM and CPM), GUI clients, Certificate, Authentication
  D. Connectivity, Processes (FWM and CPM), GUI clients, Certificate, Authentication

• Question 56:

  Which of the following CLI commands is best to use for getting a quick look at appliance performance information in Gaia?

  A. fw stat
  B. fw monitor
  C. cpview
  D. cphaprob stat
  C. cpview

• Question 57:

  What is the default protection profile for Autonomous Threat Prevention?

  A. Perimeter
  B. Guest
  C. Internal
  D. Bypass
  A. Perimeter

• Question 58:

  After deploying a Hide NAT for a new network, users are unable to access the Internet. What command would you use to check the internal NAT behavior?

  A. cp ctl kdebug + xlate xltrc nat
  B. fw ctl zdebug + xlate xltrc nat
  C. cp ctl zdebug + xlate xltrc nat
  D. fw ctl kdebug + xlate xltrc nat
  B. fw ctl zdebug + xlate xltrc nat

• Question 59:

  What is the impact of an expired or missing contract file?

  A. The existing protection settings will be removed in SmartConsole but protections are still being enforced by the Security Gateway.
  B. The existing protection settings display in SmartConsole remain and during policy install the Security Gateway asks the administrator to put a new contract file during policy install.
  C. The existing protection settings display in SmartConsole remain and the Security Gateway will use a 14-day EVAL free license instead.
  D. The existing protection settings display in SmartConsole remain but are not being enforced by the Security Gateway.
  D. The existing protection settings display in SmartConsole remain but are not being enforced by the Security Gateway.

• Question 60:

  Which Layer of the OSI Model is responsible for routing?

  A. Network
  B. Transport
  C. Session
  D. Data link
  A. Network