156-581 無料問題集「CheckPoint Check Point Certified Troubleshooting Administrator - R81」

（A）Capture packets, Update the IPS database, and Back up custom IPS files

（B）Use Recommended IPS profile

（C）Use IPS only in Detect mode

（D）Exclude problematic services from being protected by IPS (sip, H.323, etc.)

（A）No, tcpdump works from layer 4. ICMP is located in the network layer (layer 3), therefore is not applicable to this scenario

（B）No, since ICMP does not have any source or destination ports, but specification of port numbers is mandatory

（C）Yes, tcpdump is not limited to tcp specific issues

（D）No, use fw monitor instead

（A）A tcpdump session can be initiated from the SmartConsole

（B）Running tcpdump without the correct switches will negatively impact the performance of the Firewall

（C）The tcpdump has to be run from Cish mode in Gaia

（D）The tcpdump can only capture TCP packets and not UDP packets

（A）No, tcpdump works from layer 4. ICMP is located in the network layer (layer 3), therefore is not applicable to this scenario

（B）No, since ICMP does not have any source or destination ports, but specification of port numbers is mandatory

（C）Yes, tcpdump is not limited to tcp specific issues

（D）No, use fw monitor instead

（A）Security Blade

（B）Software Container

（C）Software Blade

（D）Hardware Blade

（A）Use the "-e parameter to specify an expression

（B）Clear the kernel debug buffers

（C）Disable cluster membership

（D）Disable SecureXL

（A）"Incorrect name or IP address"

（B）"Authentication to server failed"

（C）"invalid username or password"

（D）"Server down on unresponsive"

（A）Context Management

（B）Protocol Parsers

（C）Detections

（D）Protections

（A）-m

（B）-y all

（C）-x

（D）-S