Free Check Point Certified Troubleshooting Administrator – R81.20 Exam 156-582 Exam Practice Test

Which of the following is true about tcpdump?

• The tcpdump can only capture TCP packets and not UDP packets
• A tcpdump session can be initiated from the SmartConsole
• The tcpdump has to be run from clish mode in Gaia
• Running tcpdump without the correct switches will negatively impact the performance of the Firewall

Which type of NAT allows both incoming and outgoing connections?

• Both Static and Hide NAT
• Hide NAT
• Static NAT
• Port NAT

What is the name of the Software Blade Package containing CDR (Content Disarm & Reconstruction) and Zero Day protection?

• TE - Threat Emulation
• SNBT - Sandblast
• NGTX - Next Generation Threat Prevention and Extraction
• NGTP - Next Generation Threat Prevention

After deploying a Hide NAT for a new network, users are unable to access the Internet. What command would you use to check the internal NAT behavior?

• cp ctl kdebug + xlate xltrc nat
• fw ctl zdebug + xlate xltrc nat
• cp ctl zdebug + xlate xltrc nat
• fw ctl kdebug + xlate xltrc nat

What are some measures you can take to prevent IPS false positives?

• Capture packets, Update the IPS database, and Back up custom IPS files
• Use Recommended IPS profile
• Use IPS only in Detect mode
• Exclude problematic services from being protected by IPS (sip, H.323, etc.)

When running the cplic command, what argument is used to show the Signature key?

• -x
• -rn
• -s
• -yall

When managing the disk space for locally stored logs, the Delete threshold for the gateway cannot be more than what percentage of the total disk space?

• 10%
• 75%
• 50%
• 25%

What is the correct process for GUI connectivity issues with SmartConsole troubleshooting?

• Processes (FWM and CPM), Connectivity, GUI clients, Certificate, Authentication
• First troubleshoot Authentication and then the rest
• Reinstall the SmartConsole and check if it's running properly
• Connectivity, Processes (FWM and CPM), GUI clients, Certificate, Authentication

UserCenter/PartnerMAP access is based on what criteria?

• The certification level achieved by employees of an organization.
• User permissions assigned to company contacts.
• The certification level achieved by the partner.
• The level of Support purchased by a company manager.

During a problem isolation with the OSI model, what layer will you investigate when the issue is ARP or MAC address?

• Network level
• Layer 2
• Physical
• Layer 3