Free CheckPoint 156-581 Exam Dumps Questions & Answers

What file extension should be used with fw monitor to allow the output file to be imported and read in Wireshark?

• A.  .exe
• B.  .tgz
• C.  .cap
• D.  .pcap

IPS detection incorporates 4 layers. Which of the following is NOT a layer in IPS detection?

• A.  Detections
• B.  Protocol Parsers
• C.  Protections
• D.  Context Management

What process is used to stop a packet at a specified point during its flow and store it in order to examine its contents and resolve issues that may have occurred during inspection?

• A.  Debugging
• B.  Logging
• C.  Packet Capturing
• D.  Forensics Analysis

Where do Protocol parsers register themselves for IPS?

• A.  Passive Streaming Library
• B.  Other handlers register to Protocol parser
• C.  Context Management Infrastructure
• D.  Protections database

The IPS detection incorporates four layers. Which one of these four layers performs various security checks to ensure compliance to protocol standards checking for any existing anomalies?
The checks usually involve RFC compliance. It also logically segments the data into contexts that may be taken from the request header and body

• A.  Passive Streaming Library
• B.  Protections
• C.  Context Management
• D.  Protocol Parser