CheckPoint Check Point Certified Troubleshooting Administrator - R81 Sample Questions:

1. What are the four ways to insert an FW Monitor into the firewall kernel chain?

A) Relative position using geolocation, relative position using inertial navigation, absolute position, all positions
B) Absolute position using location, absolute position using alias, relative position, all positions
C) Relative position using location, relative position using alias, absolute position. all positions
D) Absolute position using location, relative position using alias, general position, all positions

2. What is true concerning fw monitor?

A) fwmonitor has been obsoleted by tcpdump with R80.10
B) fwmonitor is available on all platforms and even the syntax is the same on all gateways
C) fw monrtor is available on all management server platforms and the syntax is the same everywhere
D) tcpdump syntax can be used in fw monitor for deeper analysis

3. For Threat Prevention, which process is enabled when the Policy Conversion process has debug turned on using the INTERNAL_POLICY_LOADING=.1 command?

A) solr
B) fwm
C) cpm
D) dlpd

4. Select the technology that does the following actions
- provides reassembly via streaming for TCP
- handles packet reordering and congestion
- handles payload overlap
- provides consistent stream of data to protocol parsers

A) A Passive Streaming Library
B) fwtcpstream
C) Context Management
D) Pre-Protocol Parser

5. To verify that communication is working between the Security Management Server and the Security Gateway, which service port should be checked?

A) 18209
B) 259
C) 257
D) 19009

Solutions: