Free CheckPoint 156-581 Exam Dumps Questions & Answers

Is it possible to analyze ICMP packets with tcpdump?

• A.  No, use fw monitor instead
• B.  No, since ICMP does not have any source or destination ports, but specification of port numbers is mandatory
• C.  Yes, tcpdump is not limited to tcp specific issues
• D.  No, tcpdump works from layer 4. ICMP is located in the network layer (layer 3), therefore is not applicable to this scenario

Johnny works as a firewall administrator in ALPHA Corporation. He is also an Account Administrator in the Check Point UserCenter for his company. When searching through SecureKnowledge he found an article which can help him but he couldn't access the article, because has no permission to access it. What could cause this problem?

• A.  Only Check Point Support Engineers have access to articles with higher Technical Level
• B.  ALPHA Corporation's Support contract expired
• C.  ALPHA Corporation's Support contract expired, or he is not Check Point certified professional
• D.  Johnny must be Check Point Certified Security Master to get access articles with higher Technical Level

Which of the following is the most significant impact of not having a valid Policy Management license installed on a management server?

• A.  Inability to install policies
• B.  Inability to make rule changes
• C.  Inability to log in to SmartConsole
• D.  Inability to review logs

What is a primary advantage of using the fw monitor tool?

• A.  It is menu-driven, making it easy to configure
• B.  It can capture packets in various positions as they move through the firewall
• C.  It has no negative impact on firewall performance
• D.  It always captures all packets hitting the physical layer

Which of the following would be the most appropriate command in debugging a HideNAT issue?

• A.  fw ctl zdebug + fwn allnat
• B.  fw ctl zdebug + dynamic natips natports
• C.  fw ctl zdebug + fwxalloc hidenat
• D.  fw ctl zdebug + xlate xltrc nat