[Jan 12, 2024] Fully Updated CheckPoint Certification (156-581) Certification Sample Questions
Latest CheckPoint 156-581 Real Exam Dumps PDF
NEW QUESTION # 25
One of most common reasons that firewall administrator couldn't login anymore into a newly installed R80.x Security Management via SmartConsole is, that the 15-day trial license was expired. How can the firewall administrator install a valid license on the security management, if he only has access to the management via SmartConsole or via Gaia Portal?
- A. The Firewall administrator should run SmartDistributor.exe, located in, login and install the valid license on management server.
- B. The Firewall administrator should run SmartProvider.exe, located in, login and install the valid license on management server.
- C. The Firewall administrator should run SmartUpdate.exe, located in \bin\, login and install the valid license on management server.
- D. The Firewall administrator should run GuidBedit.exe, located in \, login and install the valid license on management server
Answer: C
NEW QUESTION # 26
What does the FWD daemon instruct the gateway to do when communication issues between the gateway and SMS/Log Server occurs?
- A. It instructs the gateway to store logs locally as it continues to try to restore communication.
- B. It instructs the gateway to stop logging until it can restore communication.
- C. It instructs the gateway to only log a specified number of logs as defined in the Security Policy.
- D. It instructs the gateway to continue forwarding logs to SKIS/Log Server and the logs with be stored in a holding queue for the server until communication is restored
Answer: A
NEW QUESTION # 27
Select the correct statement about service contracts
- A. Service contracts are provided on paper only
- B. Valid service contracts must be stored on the Security Management Server before they can be downloaded to a Security Gateway
- C. Valid service contracts must be stored only on the Security Gateways that have Threat Prevention blades enabled
- D. Valid service contracts are only stored and required on Primary Security Management Server and never downloaded on any other system
Answer: D
NEW QUESTION # 28
In the SmartConsole logs, you are seeing messages reporting NAT port exhaustion.
What command would you use to check the status of the NAT table?
- A. fw tab -t xftrc_allo
- B. fw tab -t fwx_alloc
- C. fw tab -t nat_alloc
- D. fw tab -t xlate_alloc
Answer: B
NEW QUESTION # 29
Rules within the Threat Prevention policy use the Malware database and network objects.
Which directory is used for the Malware database?
- A. $CPDIR/conf/install_manager_tmp/ANTIMALWARE/conf/
- B. $FWDIR/conf/install_manager_tmp/ANTIMALWARE/conf/
- C. $FWDIR/conf/install_firewall_tmp/ANTIMALWARE/conf/
- D. $FWDIR/log/install_manager_tmp/ANTIMALWARE/log/
Answer: C
NEW QUESTION # 30
After successful policy installation, the gateway stores a copy of the most recently installed policy package in which location?
- A. $FWDIR/state/current/FW1
- B. $FWDIR/state/_tmp/FW1
- C. $FWDIR/state/local/FW1
- D. $FWDIR/state/<gateway_name>/FW1
Answer: B
NEW QUESTION # 31
You have to do offline activation for Check Point Security Gateway. You decided to use central licensing.
What is required to complete the process?
- A. Serial Number of the Gateway
- B. Activation Code and Serial Number of the Management
- C. IP Address of the Management Server
- D. Serial Number of the Secure Gateway and IP Address of the Secure Management Server
Answer: C
NEW QUESTION # 32
When running the cplic command what argument is used to show the Signature key?
- A. -x
- B. -m
- C. -S
- D. -y all
Answer: A
NEW QUESTION # 33
When managing the disk space for locally stored logs, the Delete threshold for the gateway cannot be more than what percentage of the total disk space?
- A. 25%
- B. 10%
- C. 75%
- D. 50%
Answer: A
NEW QUESTION # 34
Chuck is a firewall administrator. He runs into some issues with policy installation, so he wants to check if all policy ports are open. How should he do it? Select the best answer.
- A. He should run following command on management server: netstat - anp | grep :18192
- B. He should run following command on both management and gateway server: netstat - anp | grep :18192
- C. He should run following command on both management and gateway server: netstat - anp | grep :18191
- D. He should run following command on gateway server: netstat - anp | grep :18191
Answer: C
NEW QUESTION # 35
What process(es) should be checked if there is high I/O and you suspect it may be related to the Antivirus Software Blade?
- A. cpta
- B. dlpu and rad processes
- C. cpm and fwm
- D. avsp
Answer: B
NEW QUESTION # 36
How many captures does the command "fw monitor -p all" take?
- A. All 15 of the inbound and outbound modules
- B. 1 from every inbound and outbound module of the chain
- C. The -p option takes the same number of captures, but gathers all of the data packet
- D. All 4 points of the fw VM modules
Answer: C
NEW QUESTION # 37
After manipulating the rulebase and objects with SmartConsole the application crashes and closes immediately. To troubleshoot you will need to review the crash report. In which directory on the host PC will you find this report?
- A. <SmartConsole Directory>\data\Crash_report\
- B. <SmartConsole Directory>\Crash_report\data\
- C. <FW1 Directory>\data\crash_report
- D. <SmartFirewall Directory>\data\crash_report\
Answer: A
NEW QUESTION # 38
The Check Point FW Monitor tool captures and analyzes incoming packets at multiple points in the traffic inspections. Which of the following is the correct inspection flow for traffic?
- A. (o) - pre-outbound, (0)- post-inbound, (i) - pre-inbound, (I) - post-inbound
- B. (0) - post-outbound, (o)- pre-outbound, (I) - post-inbound. (i) - pre-inbound
- C. (I) - pre-inbound, (i)- post-inbound, (0) - pre-outbound, (o) - post-outbound
- D. (i) - pre-inbound, (I)- post-inbound, (o) - pre-outbound. (O) - post-outbound
Answer: D
NEW QUESTION # 39
After deploying a new Static NAT configuration, traffic is not getting through.
What command would you use to troubleshoot internal problems with the NAT traffic?
- A. cp ctt zdebug + xlate xltrc nat
- B. fw ctl kdebug + xlate xltrc nat
- C. cp ctl kdebug + xlate xltrc nat
- D. fw ctl zdebug + xlate xltrc nat
Answer: D
NEW QUESTION # 40
Services with expired licenses and contracts have----------
- A. no functionality
- B. limited functionality
- C. full functionality for 90 days after they expire
- D. full functionality for 45 days after they expire
Answer: A
NEW QUESTION # 41
As a security administrator/engineer in your company, you have noticed that your HQ Check Point Security Management Server is not receiving logs from your HQ Check Point Gateway/Cluster.
To investigate this issue in the command line, you will need to verify which process is running?
- A. fwm
- B. cpm
- C. fwd
- D. cpd
Answer: C
NEW QUESTION # 42
The communication between the Security Management Server and Security Gateway to forward logs is done using the following process and port number.
- A. cpm, 19009
- B. fwm, TCP 18190
- C. fwd, TCP 257
- D. fwm, TCP 257
Answer: C
NEW QUESTION # 43
The module responsible for communicating with Active Directory services to gather identity information is called
- A. ADagent
- B. adlog
- C. pep
- D. PdP
Answer: B
NEW QUESTION # 44
Which would be a good reason to let "fw monitor' display results to the console, rather the output to a file?
- A. You would like to save system resources
- B. You only need quick. simplified results
- C. You want to review full traffic details at a later time
- D. You would like to search results for specific reasons for dropping traffic
Answer: B
NEW QUESTION # 45
What are the commands to verify the Smart Contracts on the Security Gateway?
- A. cpconfig and contracts_mgmt
- B. cpconfig and cpcontract
- C. contracts_util and cplic
- D. cpinfo and cplic
Answer: C
NEW QUESTION # 46
Which version of SmartConsole is recommended?
- A. The latest stable release available
- B. The latest release available
- C. The latest release based on the version running on the management server
- D. The latest release based on the version running on the most up-to-date gateway
Answer: A
NEW QUESTION # 47
Which of the following System Monitoring Commands (Linux) shows process resource utilization, as well as core and memory utilization?
- A. free
- B. top
- C. ps
- D. df
Answer: B
NEW QUESTION # 48
......
CheckPoint 156-581 Dumps - Secret To Pass in First Attempt: https://www.practicedump.com/156-581_actualtests.html
156-581 Practice Test Questions Updated 93 Questions: https://drive.google.com/open?id=1rW51w0HYVGPz-g890u--1qbyzYVfQVxX