CheckPoint Check Point Certified Troubleshooting Administrator - R81.20 156-582 CCTA Exam Questions

Page: 1 / 14
Total 75 questions
Question 1

When opening a new Service Request, what feature is in place to help guide you through the process?



Answer : C

When opening a new Service Request (SR) in Check Point's User Center portal, an SR wizard guides users through the process. This wizard assists in collecting necessary information, categorizing the request appropriately, and ensuring that all required details are provided to expedite the resolution process. The SR wizard simplifies the SR creation process, making it more user-friendly and efficient.


Question 2

What file extension should be used with fw monitor to allow the output file to be imported and read in Wireshark?



Answer : C

The .cap file extension is commonly used for packet capture files that can be imported and analyzed in Wireshark. When using fw monitor, specifying the output file with a .cap extension ensures compatibility with Wireshark for detailed packet analysis. Other extensions like .exe and .tgz are not suitable for packet captures, and .pea is not a standard extension for this purpose.


Question 3

The communication between the Security Management Server and Security Gateway to forward logs is done using the following process and port number:



Answer : A

The FWD process communicates between the Security Management Server and the Security Gateway to forward logs using TCP port 257. This port is designated for log transmission, ensuring that logs are efficiently and securely sent from the gateway to the management server for centralized analysis and storage.


Question 4

Which of the following files is commonly associated with troubleshooting crashes on a system such as SmartConsole?



Answer : C

A crash dump file is typically generated when an application like SmartConsole crashes. This file contains detailed information about the state of the system at the time of the crash, which is invaluable for diagnosing the cause of the failure. Analyzing crash dumps helps developers and support teams identify and fix underlying issues.


Question 5

Which of the following System Monitoring Commands (Linux) shows process resource utilization, as well as CPU and memory utilization?



Answer : D

The top command in Linux provides a real-time, dynamic view of system processes, showing CPU and memory usage among other metrics. It is the most suitable command for monitoring process resource utilization continuously. In contrast, df displays disk space usage, free shows memory usage, and ps provides a snapshot of current processes but without the dynamic, real-time monitoring that top offers.


Question 6

Running tcpdump causes a significant increase in CPU usage, what other option should you use?



Answer : C

(Note: The provided multiple-choice options for this question appear to be incomplete or incorrect. The best practice and commonly recommended alternative to tcpdump on Check Point to reduce CPU usage is cppcap. If we assume option 'C' corresponds to using cppcap, we select that.)

Given the context, the correct answer is C, assuming it refers to cppcap. cppcap is optimized for packet capturing in Check Point environments and is less CPU-intensive compared to tcpdump.


Question 7

Which is the correct "fw monitor" syntax for creating a capture file for loading it into Wireshark?



Answer : D

The correct syntax for using fw monitor to create a capture file compatible with Wireshark involves specifying the filter expression and the output file with the .cap extension. Option D correctly uses the -e flag for the filter expression and the -file flag to specify the output file, ensuring the captured data can be seamlessly imported into Wireshark for analysis.


Page:    1 / 14   
Total 75 questions