Exit demo 156-115.77 Check Point Certified Security Master PDF format · free preview

CheckPoint 156-115.77 - Questions & Answers

Free preview · every answer includes a full explanation

Product page: https://prepkeys.com/156-11577.html

Question 1
Single choice

What command would you use for a packet capture on an absolute position for TCP streaming (out) 1ffffe0

A.

fw ctl chain -po 1ffffe0 -o monitor.out

B.

fw monitor -po -0x1ffffe0 -o monitor.out

C.

fw monitor -e 0x1ffffe0 -o monitor.out

D.

fw monitor -pr 1ffffe0 -o monitor.out

Question 2
Single choice

The command fw monitor -p all displays what type of information?

A.

It captures all points of the chain as the packet goes through the firewall kernel.

B.

This is not a valid command.

C.

The -p is used to resolve MAC address in the firewall capture.

D.

It does a firewall monitor capture on all interfaces.

Question 3
Single choice

What does the IP Options Strip represent under the fw chain output?

A.

IP Options Strip is not a valid fw chain output.

B.

The IP Options Strip removes the IP header of the packet prior to be passed to the other kernel functions.

C.

The IP Options Strip copies the header details to forward the details for further IPS inspections.

D.

IP Options Strip is only used when VPN is involved.

Question 4
Single choice

The command that lists the firewall kernel modules on a Security Gateway is:

A.

fw list kernel modules

B.

fw ctl kernel chain

C.

fw ctl debug -m

D.

fw list modules

Question 5
Single choice

Which of the following BEST describes the command fw ctl chain function?

A.

View how CoreXL is distributing traffic among the firewall kernel instances.

B.

View established connections in the connections table.

C.

View the inbound and outbound kernel modules and the order in which they are applied.

D.

Determine if VPN Security Associations are being established.

Question 6
Single choice

The command _____________ shows which firewall chain modules are active on a gateway.

A.

fw stat

B.

fw ctl debug

C.

fw ctl chain

D.

fw ctl multik stat

Question 7
Single choice

The command fw ctl kdebug <params> is used to:

A.

list enabled debug parameters.

B.

read the kernel debug buffer to obtain debug messages.

C.

enable kernel debugging.

D.

select specific kernel modules for debugging.

Question 8
Single choice

Compare these two images to establish which blade/feature was disabled on the firewall.

A.

IPS

B.

VPN

C.

NAT

D.

L2TP

Question 9
Single choice

What command would give you a summary of all the tables available to the firewall kernel?

A.

fw tab

B.

fw tab -s

C.

fw tab -h

D.

fw tab -o

Question 10
Single choice

What flag option(s) must be used to dump the complete table in friendly format, assuming there are more than one hundred connections in the table?

A.

fw tab -t connections -f

B.

fw tab -t connect -f -u

C.

fw tab -t connections -s

D.

fw tab -t connections -f u

Showing 10 of 295 questions · Unlock the full set