CheckPoint Check Point Certified Troubleshooting Administrator - R81

QUESTION NO: 1
When using "fw monitor" in R80.30, it is highly recommended that you:

A. Clear the kernel debug buffers B. Disable cluster membership C. Disable SecureXL D. Use the "-e parameter to specify an expression

Correct Answer: D

QUESTION NO: 2
What is a primary advantage of using the fw monitor tool?

A. It always captures all packets hitting the physical layer B. It can capture packets in various positions as they move through the firewall C. It is menu-driven, making it easy to configure D. It has no negative impact on firewall performance

Correct Answer: B

QUESTION NO: 3
What is the most efficient way to view large fw monitor captures and run filters on the file?

A. snoop B. CLISH C. CLI D. wireshark

Correct Answer: D

QUESTION NO: 4
The module responsible for communicating with Active Directory services to gather identity information is called

A. pep B. ADagent C. PdP D. adlog

Correct Answer: D

QUESTION NO: 5
Which version of SmartConsole is recommended?

A. The latest release based on the version running on the management server B. The latest stable release available C. The latest release based on the version running on the most up-to-date gateway D. The latest release available

Correct Answer: B

QUESTION NO: 6
Application Control and URL Filtering update files are located in which directory?

A. $CPDIR/appi/update B. $CPDIR/apci/update C. $FWDIR/appi/update/ D. $FWDIR/conf/update

Correct Answer: C

QUESTION NO: 7
As a security administrator/engineer in your company, you have noticed that your HQ Check Point Security Management Server is not receiving logs from your HQ Check Point Gateway/Cluster.
To investigate this issue in the command line, you will need to verify which process is running?

A. fwd B. cpm C. fwm D. cpd

Correct Answer: A

QUESTION NO: 8
Select the correct statement about service contracts

A. Service contracts are provided on paper only B. Valid service contracts must be stored only on the Security Gateways that have Threat Prevention blades enabled C. Valid service contracts are only stored and required on Primary Security Management Server and never downloaded on any other system D. Valid service contracts must be stored on the Security Management Server before they can be downloaded to a Security Gateway

Correct Answer: C

QUESTION NO: 9
Which type of NAT allows both incoming and outgoing connections?

A. Both Static and Hide NAT B. Hide NAT C. Static NAT D. Port NAT

Correct Answer: C

QUESTION NO: 10
To verify that communication is working between the Security Management Server and the Security Gateway, which service port should be checked?

A. 18209 B. 19009 C. 259 D. 257

Correct Answer: B

CheckPoint Check Point Certified Troubleshooting Administrator - R81 - 156-581 Exam Questions