156-115.77 試験問題を無料オンラインアクセス

When using the command fw monitor, what command ensures the capture is accurate?

• A.fwaccel off
• B.fw accel off
• C.fwaccel on
• D.export TDERROR_ALL_ALL=5

Which command displays FireWall internal statistics about memory and traffic?

• A.fw getifs
• B.cpstat os -f memory
• C.cpstat os -f cpu
• D.fw ctl pstat

You are troubleshooting an issue for your HR team. One of the users is using IP 10.10.10.24.
They having been trying to access the vacation servers but all connections are failing. You have checked the logs and do not see any dropped traffic. You have a suspicion that the drop is not being logged. What command could you use to confirm this?

• A.fw -t connections -s
• B.fw ctl zdebug + log dynlog
• C.You cannot run a command for this; you must enable logging on all rules
• D.fw ctl pstat host 10.10.10.24

How do you clear the connections table?

• A.Run the command fw tab -t connections -c
• B.Run the command fw tab -t connections -x
• C.In Gateway Properties > Optimizations click Clear connections table
• D.Run the command fw tab -t conns -c

Your customer receives an alert from their network operation center, they are seeing ARP and Ping scans of their network originating from the firewall. What could be the reason for the behaviour?

• A.One or both of the firewalls in a cluster have stopped receiving CCP packets on an interface.
• B.Check Point's Antibot blade performs anti-bot scans of the surrounding network.
• C.Check Point firewalls probe adjacent networking devices during normal operation.
• D.IPS is disabled on the firewalls and there is a known OpenSSL vulnerability that allows a hacker to cause a network scan to originate from the firewall.