156-582問題集、CheckPoint実際の試験問題

質問 1

Services with expired licenses and contracts have,

A. limited functionality

B. full functionality for 90 days after they expire

C. no functionality

D. full functionality for 45 days after they expire

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 2

You need to capture NAT information into packet capture, what tool is the best suitable for this task?

A. cppcap

B. fw ctl zdebug + xlate xltrc nat

C. fw monitor

D. tcpdump

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 3

After deploying a new Static NAT configuration, traffic is not getting through. What command would you use to verify that the proxy ARP configuration has been loaded?

A. fw ctl conn

B. cp ctl arp

C. fw ctl arp

D. fw arp ctl

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 4

Which is the correct "fw monitor" syntax for creating a capture file for loading it into Wireshark?

A. This cannot be accomplished as it is not supported with R80.10

B. fw monitor -e "accept <FILTER EXPRESSION*;" > Output.cap

C. fw monitor -e "accept <FILTER EXPRESSION^" -o Output.cap

D. fw monitor -e "accept <FILTER EXPRESSION*;" -file Output.cap

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 5

Customer wants to use autonomous threat prevention. How do you enable it?

A. Enable Autonomous Threat Prevention on the Security Gateway from the SmartConsole: Gateway and Servers view, inspection profile is not needed, the Security Gateway will automatically select the best profile according to deployment.

B. Enable Autonomous Threat Prevention on the Security Gateway from the SmartConsole: Gateway and Servers view and enable IPS on the Security Gateway by the command: ips on.

C. Enable Autonomous Threat Prevention on the Security Gateway from the SmartConsole:Gateway and Servers view, the default profile Strict Security will be selected.

D. Enable Autonomous Threat Prevention on the Security Gateway from the SmartConsole: Gateway and Servers view, then select inspection profile.

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 6

Running tcpdump causes a significant increase on CPU usage, what other option should you use?

A. Wait for out of business hours to do a packet capture

B. You need to use tcpdump with -e option to decrease the length of packet in captures and it will utilize the less CPU

C. cppcap

D. fw monitor

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 7

What is the default protection profile for Autonomous Threat Prevention?

A. Guest

B. Bypass

C. Perimeter

D. Internal

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 8

Where would you look to find the error log file to investigate a logging issue on the Security Management Server?

A. SFWDIR/log/fwm.elg

B. SCPDIR/log/cpd.elg

C. SMDS_FWDIR/log/cpm.elg

D. SFWDIR/log/fwd.elg

正解: D

解説: (PassTest メンバーにのみ表示されます)

CheckPoint Check Point Certified Troubleshooting Administrator - R81.20 - 156-582 模擬練習