Free Check Point Certified Troubleshooting Administrator – R81.20 Exam 156-582 Exam Practice Test

What are the commands to verify the Smart Contracts on the Security Gateway?

• cpconfig and contracts_mgmt
• cpconfig and cpcontract
• cpinfo and cplic
• contractjtil and cplic

Which of the following would be the most appropriate command in debugging a HideNAT issue?

• fw ctl zdebug + fwn allnat
• fw ctl zdebug + dynamic natips natports
• fw ctl zdebug + xlate xltrc nat
• fw ctl zdebug + fwxalloc hidenat

Running tcpdump causes a significant increase on CPU usage, what other option should you use?

• fw monitor
• Wait for out of business hours to do a packet capture
• cppcap
• You need to use tcpdump with -e option to decrease the length of packet in captures and it will utilize the less CPU

SmartConsole closes immediately, what is the most likely reason?

• The process crashed in kernel space
• The process crashed in user space
• The user idle time expired and SmartConsole disconnected the user
• The Security Management server rejected the client connection

After deploying a Hide NAT for a new network, users are unable to access the Internet. What command would you use to check the internal NAT behavior?

• cp ctl kdebug + xlate xltrc nat
• fw ctl zdebug + xlate xltrc nat
• cp ctl zdebug + xlate xltrc nat
• fw ctl kdebug + xlate xltrc nat

As a security administrator/engineer in your company, you have noticed that your HQ Check Point Security Management Server is not receiving logs from your HQ Check Point Gateway/Cluster. To investigate this issue in the command line, you will need to verify which process is running?

• cpm
• cpd
• fwd
• fwm

What are some measures you can take to prevent IPS false positives?

• Capture packets, Update the IPS database, and Back up custom IPS files
• Use Recommended IPS profile
• Use IPS only in Detect mode
• Exclude problematic services from being protected by IPS (sip, H.323, etc.)

What is a primary advantage of using the fw monitor tool?

• It is menu-driven, making it easy to configure
• It can capture packets in various positions as they move through the firewall
• It has no negative impact on firewall performance
• It always captures all packets hitting the physical layer

Select the correct statement about service contracts.

• Valid service contracts must be stored only on the Security Gateways that have Threat Prevention blades enabled
• Service contracts are provided on paper only
• Valid service contracts are only stored and required on the Primary Security Management Server and never downloaded on any other system
• Valid service contracts must be stored on the Security Management Server before they can be downloaded to a Security Gateway

Where can a Check Point customer find information about product licenses they own, download product manuals, and get information about product support expiration?

• Smart Console
• PartnerMAP portal
• UserCenter portal
• In security management server via CLI and executing command cplic print