Free CheckPoint 156-581 Exam Dumps Questions & Answers

The tcpdump and fw monitor commands can both be used to capture packets on the security gateway.
While troubleshooting an issue one may choose to use fw monitor but not tcpdump?

• A.traffic needs to be filtered based on source port
• B.the traffic needs to be captured to a pcap file for later analysis in wireshark
• C.it is required to verify if a packet is dropped or changed after inspection by a certain kernel module
• D.the capture process needs to be automated using shell script

IPS detection incorporates 4 layers. Which of the following is NOT a layer in IPS detection?

• A.Context Management
• B.Protocol Parsers
• C.Detections
• D.Protections

When using "fw monitor" in R80.30, it is highly recommended that you:

• A.Disable SecureXL
• B.Clear the kernel debug buffers
• C.Use the "-e parameter to specify an expression
• D.Disable cluster membership

What are the commands to verify the Smart Contracts on the Security Gateway?

• A.cpconfig and contracts_mgmt
• B.cpinfo and cplic
• C.contracts_util and cplic
• D.cpconfig and cpcontract

Which of the following is the most significant impact of not having a valid Policy Management license installed on a management server?

• A.Inability to install policies
• B.Inability to review logs
• C.Inability to log in to SmartConsole
• D.Inability to make rule changes