Teste01

Which of the following CLI commands is best to use for getting a quick look at appliance performance information in Gaia?. fw stat. fw monitor. cpview. cphaprob stat.

You want to work with a license for your gateway in User Center portal, but all options are greyed out. What is the reason?. Your account has classification permission to Viewer. Your account has classification permission to Licenser. You are not defined as Support Contact. Your account does not have any rights.

What is the process of intercepting and logging traffic?. Debugging. Forensics Analysis. Logging. Packet Capturing.

Which of the following is NOT an account user classification?. Licensers. Manager. Viewer. Administrator.

You want to collect diagnostics data to include with an SR (Service Request). What command or utility best meets your needs?. cpconfig. cpinfo. cpplic. contracts_mgmt.

During a problem isolation with the OSI model, what layer will you investigate when the issue is ARP or MAC address?. Network level. Layer 2. Physical. Layer 3.

Check Point's self-service knowledge base of technical documents and tools covers everything from articles describing how to fix specific issues, understand error messages and to how to plan and perform product installation and upgrades. This knowledge base is called: SupportCenterBase. SecureDocs. SupportDocs. SecureKnowledge.

Which of the following System Monitoring Commands (Linux) shows process resource utilization, as well as CPU and memory utilization?. df. free. ps. top.

What file extension should be used with fw monitor to allow the output file to be imported and read in Wireshark?. .pea. .exe. .cap. .tgz.

How many different types of Service Requests exist?. 4. 2. 3. 5.

When opening a new Service Request, what feature is in place to help guide you through the process?. The SmartConsole Help feature. The TAC chat room. An SR wizard. An SR API.

Which of the following is NOT a way to insert fw monitor into the chain when troubleshooting packets throughout the chain?. Relative position using id. Absolute position. Relative position using location. Relative position using alias.

Which Layer of the OSI Model is responsible for routing?. Network. Transport. Session. Data link.

Which is the correct "fw monitor" syntax for creating a capture file for loading it into Wireshark?. fw monitor -e "accept <FILTER EXPRESSION*;" > Output.cap. This cannot be accomplished as it is not supported with R80.10. fw monitor -e "accept <FILTER EXPRESSION^" -o Output.cap. fw monitor -e "accept <FILTER EXPRESSION*;" -file Output.cap.

What is the most efficient way to view large fw monitor captures and run filters on the file?. snoop. CLI. CLISH. Wireshark.

Running tcpdump causes a significant increase on CPU usage, what other option should you use?. fw monitor. Wait for out of business hours to do a packet capture. cppcap. You need to use tcpdump with -e option to decrease the length of packet in captures and it will utilize the less CPU.

Which of the following is a valid way to capture packets on Check Point gateways?. Firewall logs. Wireshark. tcpdump. Network taps.

Which of the following is true about tcpdump?. The tcpdump can only capture TCP packets and not UDP packets. A tcpdump session can be initiated from the SmartConsole. The tcpdump has to be run from clish mode in Gaia. Running tcpdump without the correct switches will negatively impact the performance of the Firewall.

What is a primary advantage of using the fw monitor tool?. It is menu-driven, making it easy to configure. It can capture packets in various positions as they move through the firewall. It has no negative impact on firewall performance. It always captures all packets hitting the physical layer.

After reviewing the Install Policy report and error codes listed in it, you need to check if the policy installation port is open on the Security Gateway. What is the correct port to check?. 19009. 18190. 18210. 18191.

Which of the following allows you to capture packets at four inspection points as they traverse a Check Point gateway?. tcpdump. Firewall logs. Kernel debugs. fw monitor.

Check Point provides tools & commands to help you identify issues about products and applications. Which Check Point command can help you display status and statistics information for various Check Point products and applications?. cpstat. CP-stat. CPview. fwstat.

Running tcpdump causes a significant increase in CPU usage, what other option should you use?. o. O. I. i.

You want to print the status of WatchDog-monitored processes. What command best meets your needs?. cpwd_admin list. tcpdump. cppcap. cpplic print.

The Check Point FW Monitor tool captures and analyzes incoming packets at multiple points in the traffic inspections. Which of the following is the correct inspection flow for traffic?. (i) - pre-inbound, (I) - post-inbound, (o) - pre-outbound, (O) - post-outbound. (o) - pre-outbound, (O) - post-inbound, (i) - pre-inbound, (I) - post-inbound. (O) - post-outbound, (o) - pre-outbound, (I) - post-inbound, (i) - pre-inbound. (1) - pre-inbound, (i) - post-inbound, (O) - pre-outbound, (o) - post-outbound.

What does the FWD daemon instruct the gateway to do when communication issues between the gateway and SMS/Log Server occur?. It instructs the gateway to continue forwarding logs to SMS/Log Server and the logs will be stored in a holding queue for the server until communication is restored. It instructs the gateway to stop logging until it can restore communication. It instructs the gateway to store logs locally as it continues to try to restore communication. It instructs the gateway to only log a specified number of logs as defined in the Security Policy.

You tested the connection from source to destination and you are not able to find logs in your Security Management. What is the best possible reason?. The FWM process crashed on Security Management, therefore logging will not work. There is not enough storage in Security Management, so the logs can't be stored. The logging blade was not enabled on Security Gateway. The gateway is logging locally.

You need to switch the active log file on the Security Gateway. What is the correct command?. fw -p -o <log file> switch. fw logswitch. Install security policy. fw switchlog.

What is the port for the Log Collection on Security Management Server?. 18191. 443. 258. 257.

What Check Point process controls logging?. CPWD. FWD. CPD. CPM.