Free CheckPoint 156-581 Exam Dumps Questions & Answers

After successful policy installation, the gateway stores a copy of the most recently installed policy package in which location?

• A.  $FWDIR/state/_tmp/FW1
• B.  $FWDIR/state/local/FW1
• C.  $FWDIR/state/current/FW1
• D.  $FWDIR/state/<gateway_name>/FW1

Performing NAT on the Client Side means that translation of all packets will occur?

• A.  In the firewall kernel closest to the initiator of the connection
• B.  In the inbound firewall kernel instance
• C.  After the packets have already been routed
• D.  Prior to any routing taking place

How can a firewall admin check if the logs are coming from Security Gateway Cluster to Management Server?

• A.  tcpdump -ni interface_pointing_from_Gateway tcp port 257
• B.  fw monitor -e 'accept host(ip_address of GW) and spon=257"
• C.  tcpdump -ni interface_pointing_to_Gateway tcp port 257
• D.  fw monitor -e 'accept host(p_address of GW) and dport=2571"

Select the correct statement about service contracts

• A.  Valid service contracts must be stored on the Security Management Server before they can be downloaded to a Security Gateway
• B.  Valid service contracts are only stored and required on Primary Security Management Server and never downloaded on any other system
• C.  Service contracts are provided on paper only
• D.  Valid service contracts must be stored only on the Security Gateways that have Threat Prevention blades enabled

Which of the following allows you to capture packets at four inspection points as they traverse a Check Point gateway?

• A.  fw monitor
• B.  Firewall logs
• C.  tcpdump
• D.  Kernel debugs