156-581無料問題集「CheckPoint Check Point Certified Troubleshooting Administrator

質問 1

The IPS detection incorporates four layers. Which one of these four layers performs various security checks to ensure compliance to protocol standards checking for any existing anomalies?
The checks usually involve RFC compliance. It also logically segments the data into contexts that may be taken from the request header and body

（A）Protocol Parser

（B）Context Management

（C）Protections

（D）Passive Streaming Library

正解：A 解答を投票する

質問 2

The customer is using Check Point appliances that were configured long ago by third-party administrators. Current policy includes different enabled IPS protections and Bypass Under Load function. Bypass Under Load is configured to disable IPS inspections if CPU and Memory usage is higher than 80%. The Customer reports that IPS protections are not working at all regardless of CPU and Memory usage. What is a possible reason of such behavior?

（A）The kernel parameter ids_tolerance_no_stress is set to 10

（B）The kernel parameter ids_assume_stress is set to 1

（C）The kernel parameter ids_tolerance_stress is set to 10

（D）The kernel parameter ids_assume_stress is set to O

正解：C 解答を投票する

質問 3

You have to do offline activation for Check Point Security Gateway. You decided to use central licensing.
What is required to complete the process?

（A）Activation Code and Serial Number of the Management

（B）Serial Number of the Secure Gateway and IP Address of the Secure Management Server

（C）IP Address of the Management Server

（D）Serial Number of the Gateway

正解：C 解答を投票する

質問 4

Which would be a good reason to let "fw monitor' display results to the console, rather the output to a file?

（A）You would like to save system resources

（B）You want to review full traffic details at a later time

（C）You only need quick. simplified results

（D）You would like to search results for specific reasons for dropping traffic

正解：C 解答を投票する

質問 5

What process(es) should be checked if there is high I/O and you suspect it may be related to the Antivirus Software Blade?

（A）cpm and fwm

（B）avsp

（C）cpta

（D）dlpu and rad processes

正解：D 解答を投票する

質問 6

Jerry is firewall administrator in BRAVO Company. He gets a call from the R&D department Manager who says that some employees from R&D could not access new development server (192.168.60.100), which is in server network behind the Data Center Firewall. Jerry looks at FW logs and found no log records for that server. What should he do next?

（A）He must check if the packets are being dropped at the firewall by using command fw ctl zdebug + drop dst=192.168 60.100

（B）He must check if the packets are being dropped at the firewall by using command cppcap -f "arp and host 192.168.80.10" -DNT -o /var/log/capture.pcap

（C）He must check if the packets are being dropped at the firewall by using command fw ctl zdebug + drop grep 192.168.60.100

（D）He must check if the packets are being dropped at the firewall by using command tcpdump -i interface host 192.168.60.100

正解：C 解答を投票する

質問 7

Where can a Check Point customer find information about product licenses they own, download product manuals and get information about product support expiration?

（A）UserCenter portal

（B）PartnerMAP portal

（C）Smart Console

（D）In security management server via CU and executing command cplic print

正解：A 解答を投票する

質問 8

As a security administrator/engineer in your company, you have noticed that your HQ Check Point Security Management Server is not receiving logs from your HQ Check Point Gateway/Cluster.
To investigate this issue in the command line, you will need to verify which process is running?

（A）fwd

（B）fwm

（C）cpm

（D）cpd

正解：A 解答を投票する

質問 9

Which of the following is a valid way to capture general packets on Check Point gateways?

（A）Firewall logs

（B）Wireshark

（C）tcpdump

（D）Network taps

正解：C 解答を投票する

156-581 無料問題集「CheckPoint Check Point Certified Troubleshooting Administrator - R81」

弊社を連絡する

関連リンク

トップ試験