156-582 Exam Questions

During a problem isolation with the OSI model, what layer will you investigate when the issue is ARP or MAC address?

SmartEvent shows logs from gateways, but no Events are generated. Why?

Threat Emulation is enabled on only one gateway in a cluster. What happens during failover?

After enabling CoreXL, throughput increases but latency becomes inconsistent. Reason?

A VPN tunnel intermittently fails after renegotiation. Debug shows: "Invalid SPI."

A customer reports constant failovers. Logs show "ClusterXL interface down," but the port is physically up. Why?

How many different types of Service Requests exist?

When opening a new Service Request, what feature is in place to help guide you through the process?

Which of the following is NOT a way to insert fw monitor into the chain when troubleshooting packets throughout the chain?

Which Layer of the OSI Model is responsible for routing?

Which is the correct "fw monitor" syntax for creating a capture file for loading it into Wireshark?

What is the most efficient way to view large fw monitor captures and run filters on the file?

A file bypasses Threat Emulation for specific users only. Most likely cause?

SecureXL is enabled, but traffic is not accelerated. Why?

Users cannot reach their VPN site through the cluster VIP. Traffic works when connecting to each individual node.

VPN performs full tunnel with Office Mode IPs. Internet browsing fails. What's missing?

Where would you look to find the error log file to investigate a logging issue on the Security Management Server?

To verify that communication is working between the Security Management Server and the Security Gateway, which service port should be checked?

Which of the following files is commonly associated with troubleshooting crashes on a system such as SmartConsole?

What is the difference between the "Super User" and "Read Write All" SmartConsole permission profiles?

After manipulating the rulebase and objects with SmartConsole the application crashes and closes immediately. To troubleshoot, you will need to review the crash report. In which di...

In the Security Management Architecture, what port and process SmartConsole uses to communicate with the management server?

SmartConsole closes immediately, what is the most likely reason?

What is the correct process for GUI connectivity issues with SmartConsole troubleshooting?

Application Control and URL Filtering update files are located in which directory?

You were asked to set up logging for a rule to log a full list of URLs when the rule hits in the Rule Base. How do you accomplish that?

Policy installation fails randomly after making changes. No SIC errors.

A packet is dropped even though a rule explicitly allows it. Debug shows: "Dropped by fwpsl." What is the cause?

VPN is up, traffic flows, but performance is extremely low. CPU is normal. What's the most likely reason?

Check Point's self-service knowledge base of technical documents and tools covers everything from articles describing how to fix specific issues, understand error messages and to h...

Which of the following System Monitoring Commands (Linux) shows process resource utilization, as well as CPU and memory utilization?

What file extension should be used with fw monitor to allow the output file to be imported and read in Wireshark?

Running tcpdump causes a significant increase on CPU usage, what other option should you use?

Which of the following is a valid way to capture packets on Check Point gateways?

Which of the following is true about tcpdump?

What is a primary advantage of using the fw monitor tool?

After reviewing the Install Policy report and error codes listed in it, you need to check if the policy installation port is open on the Security Gateway. What is the correct port...

Which of the following allows you to capture packets at four inspection points as they traverse a Check Point gateway?

Check Point provides tools & commands to help you identify issues about products and applications. Which Check Point command can help you display status and statistics information...

Running tcpdump causes a significant increase in CPU usage, what other option should you use?