Online Access Free 156-581 Exam Questions

When running the cplic command what argument is used to show the Signature key?

• A.-m
• B.-S
• C.-y all
• D.-x

Which command shows the installed licenses and contracts on a Check Point device?

• A.cplicenses print -x
• B.cplic print -x
• C.cplic print -s
• D.fwlic print -x

Which of the following is a valid way to capture general packets on Check Point gateways?

• A.Firewall logs
• B.tcpdump
• C.Network taps
• D.Wireshark

What does the FWD daemon instruct the gateway to do when communication issues between the gateway and SMS/Log Server occurs?

• A.It instructs the gateway to store logs locally as it continues to try to restore communication.
• B.It instructs the gateway to only log a specified number of logs as defined in the Security Policy.
• C.It instructs the gateway to continue forwarding logs to SKIS/Log Server and the logs with be stored in a holding queue for the server until communication is restored
• D.It instructs the gateway to stop logging until it can restore communication.

Is it possible to analyze ICMP packets with tcpdump?

• A.No, since ICMP does not have any source or destination ports, but specification of port numbers is mandatory
• B.Yes, tcpdump is not limited to tcp specific issues
• C.No, use fw monitor instead
• D.No, tcpdump works from layer 4. ICMP is located in the network layer (layer 3), therefore is not applicable to this scenario