Online Access Free 156-583 Exam Questions

How would you check the connection status of a gateway to the Log server?

• A.Run netstat -anp | grep :257 in expert mode on Log server
• B.Run netstat -anp | grep :18187 in expert mode on Log server
• C.Run netstat -anp | grep :18187 in CLISH on Log server
• D.Run netstat -anp | grep :257 in CLISH on Log server

In the Security Management Architecture, what port and process SmartConsole uses to communicate with the management server?

• A.CPM and 18190
• B.CPM and 19009
• C.FWM and 19009
• D.CPM 19009 and 18191

When managing the disk space for locally stored logs, the Delete threshold for the gateway cannot be more than what percentage of the total disk space?

• A.10%
• B.50%
• C.25%
• D.75%

Is it possible to analyze ICMP packets with tcpdump?

• A.No, since ICMP does not have any source or destination ports, but specification of port numbers is mandatory
• B.No, use fw monitor instead
• C.No, tcpdump works from layer 4. ICMP is located in the network layer (layer 3), therefore is not applicable to this scenario
• D.Yes, tcpdump is not limited to TCP specific issues

Which is the correct "fw monitor" syntax for creating a capture file for loading it into Wireshark?

• A.fw monitor -e "accept <FILTER EXPRESSION^" -o Output.cap
• B.This cannot be accomplished as it is not supported with R80.10
• C.fw monitor -e "accept <FILTER EXPRESSION*;" > Output.cap
• D.fw monitor -e "accept <FILTER EXPRESSION*;" -file Output.cap