Online Access Free 156-581 Practice Test

You need to verify the license on Security Gateway. What command you can use from the command line?

• A.sh lic stat
• B.cplic list
• C.cplic -I
• D.cplic print

One of most common reasons that firewall administrator couldn't login anymore into a newly installed R80.x Security Management via SmartConsole is, that the 15-day trial license was expired. How can the firewall administrator install a valid license on the security management, if he only has access to the management via SmartConsole or via Gaia Portal?

• A.The Firewall administrator should run SmartUpdate.exe, located in \bin\, login and install the valid license on management server.
• B.The Firewall administrator should run SmartDistributor.exe, located in, login and install the valid license on management server.
• C.The Firewall administrator should run GuidBedit.exe, located in \, login and install the valid license on management server
• D.The Firewall administrator should run SmartProvider.exe, located in, login and install the valid license on management server.

Which of the following is NOT a way to insert fw monitor into the chain when troubleshooting packets throughout the chain?

• A.Relative position using id
• B.Absolution position
• C.Relative position using alias
• D.Relative position using location

After deploying a Hide NAT for a new network, users are unable to access the Internet.
What command would you use to check the internal NAT behavior?

• A.cp ctl kdebug + xlate xltrc nat
• B.fw ctl kdebug + xlate xltrc nat
• C.fw ctl zdebug + xlate xltrc nat
• D.cp ctl zdebug + xlate xltrc nat

Is it possible to analyze ICMP packets with tcpdump?

• A.No, since ICMP does not have any source or destination ports, but specification of port numbers is mandatory
• B.No, use fw monitor instead
• C.No, tcpdump works from layer 4. ICMP is located in the network layer (layer 3), therefore is not applicable to this scenario
• D.Yes, tcpdump is not limited to tcp specific issues