Free CheckPoint 156-581 Exam Dumps Questions & Answers

After deploying a Hide NAT for a new network, users are unable to access the Internet.
What command would you use to check the internal NAT behavior?

• A.  fw ctl zdebug + xlate xltrc nat
• B.  fw ctl kdebug + xlate xltrc nat
• C.  cp ctl kdebug + xlate xltrc nat
• D.  cp ctl zdebug + xlate xltrc nat

What is a primary advantage of using the fw monitor tool?

• A.  It always captures all packets hitting the physical layer
• B.  It can capture packets in various positions as they move through the firewall
• C.  It has no negative impact on firewall performance
• D.  It is menu-driven, making it easy to configure

Check Point Threat Prevention policies can contain multiple policy layers and each layer consists of its own Rule Base.
Which Threat Prevention daemon is used for Anti-virus?

• A.  in.msd
• B.  in.emaild.mta
• C.  in.emaild
• D.  ctasd

If you run the command "fw monitor -e "accept src.10.1.1.101 or src=172.21.201.10 or src=192.0.2.11 from the Cli.sh.
What will be captured?

• A.  fw monitor only works in expert mode so no packets will be captured
• B.  Packets from 10 1.1.201 going to 192.0.2.10
• C.  Only packet going to 192.0.2.10
• D.  Packets destined to 172.21.101.10 from 10.1.1.101

After deploying a new Static NAT configuration traffic is not getting through.
What command would you use to verify that the proxy arp configuration has been loaded?

• A.  fw arp ctl
• B.  fw ctl arp
• C.  cp ctl arp
• D.  fw ctl coon