Check Point Certified Troubleshooting Administrator - R81 (156-581) Free Practice Test

Question 1

What are some measures you can take to prevent IPS false positives?

A. Capture packets, Update the IPS database, and Back up custom IPS files

B. Use IPS only in Detect mode

C. Use Recommended IPS profile

D. Exclude problematic services from being protected by IPS (sip, H.323, etc.)

Correct Answer: D

Question 2

Which of the following CLI commands is best to use for getting a quick look at appliance performance information in Gaia?

A. cphaprob stat

B. fw monitor

C. top

D. fw stat

Correct Answer: C

Question 3

When running the cplic command what argument is used to show the Signature key?

A. -S

B. -m

C. -y all

D. -x

Correct Answer: D

Question 4

Which Threat Prevention daemon is the core Threat Emulation engine and responsible for emulation files and communications with Threat Cloud?

A. ted

B. scrub

C. in.msd

D. ctasd

Correct Answer: A

Question 5

The communication between the Security Management Server and Security Gateway to forward logs is done using the following process and port number.

A. fwd, TCP 257

B. fwm, TCP 18190

C. fwm, TCP 257

D. cpm, 19009

Correct Answer: A

Question 6

Which type of NAT allows both incoming and outgoing connections?

A. Hide NAT

B. Both Static and Hide NAT

C. Static NAT

D. Port NAT

Correct Answer: C

Question 7

Services with expired licenses and contracts have----------

A. full functionality for 45 days after they expire

B. limited functionality

C. full functionality for 90 days after they expire

D. no functionality

Correct Answer: D

Question 8

Which version of SmartConsole is recommended?

A. The latest stable release available

B. The latest release based on the version running on the most up-to-date gateway

C. The latest release based on the version running on the management server

D. The latest release available

Correct Answer: A

Question 9

Chuck is a firewall administrator. He runs into some issues with policy installation, so he wants to check if all policy ports are open. How should he do it? Select the best answer.

A. He should run following command on management server: netstat - anp | grep :18192

B. He should run following command on gateway server: netstat - anp | grep :18191

C. He should run following command on both management and gateway server: netstat - anp | grep :18192

D. He should run following command on both management and gateway server: netstat - anp | grep :18191

Correct Answer: D

Question 10

Which of the following allows you to capture packets at four inspection points as they traverse a Check Point gateway?

A. Firewall logs

B. Kernel debugs

C. fw monitor

D. tcpdump

Correct Answer: C

Welcome to TestSimulate

CheckPoint Check Point Certified Troubleshooting Administrator - R81 (156-581) Free Practice Test