CheckPoint Certification 156-581 Practice Test Engine Try These 93 Exam Questions [Q11-Q31]

NO.11 What are the commands to verify the Smart Contracts on the Security Gateway?

NO.12 Is it possible to analyze ICMP packets with tcpdump?

NO.13 To verify that communication is working between the Security Management Server and the Security Gateway, which service port should be checked?

NO.14 What is the most efficient way to view large fw monitor captures and run filters on the file?

NO.15 Which command do you need to execute to insert fw monitor after TCP streaming (out) in the outbound chain using absolute position? Given the chain was 1ffffe0, select the correct answer.

NO.16 Which is the correct ‘fw monitor syntax for creating a capture file for loading it into Wireshark?

NO.17 The Identity Awareness process that receives identity data from the identity sources and organizes it in tables before forwarding the data to the enforcement module is called

NO.18 As a security administrator/engineer in your company, you have noticed that your HQ Check Point Security Management Server is not receiving logs from your HQ Check Point Gateway/Cluster.
To investigate this issue in the command line, you will need to verify which process is running?

NO.19 After deploying a new Static NAT configuration, traffic is not getting through.
What command would you use to troubleshoot internal problems with the NAT traffic?

NO.20 Chuck is a firewall administrator. He runs into some issues with policy installation, so he wants to check if all policy ports are open. How should he do it? Select the best answer.

NO.21 Select the technology that does the following actions
– provides reassembly via streaming for TCP
– handles packet reordering and congestion
– handles payload overlap
– provides consistent stream of data to protocol parsers

NO.22 Some users from your organization have been reporting some connection problems with CIFS since this morning. You suspect an IPS issue after an automatic IPS update last night. So you want to perform a packet capture on uppercase I only directly after the IPS chain module (position
4 in the chain) to check if the packets pass the IPS. What command do you need to run?

NO.23 When opening a new Service Request, what feature is in place to help guide you through the process?

NO.24 Jerry is firewall administrator in BRAVO Company. He gets a call from the R&D department Manager who says that some employees from R&D could not access new development server (192.168.60.100), which is in server network behind the Data Center Firewall. Jerry looks at FW logs and found no log records for that server. What should he do next?

NO.25 Select the correct statement about service contracts

NO.26 What process is used to stop a packet at a specified point during its flow and store it in order to examine its contents and resolve issues that may have occurred during inspection?

NO.27 Which Threat Prevention daemon is the core Threat Emulation engine and responsible for emulation files and communications with Threat Cloud?

NO.28 You need to verify the license on Security Gateway. What command you can use from the command line?

NO.29 What file extension should be used with fw monitor to allow the output file to be imported and read in Wireshark?

NO.30 The default time out for policy installation is

NO.31 Which of the following is true about tcpdump?