Home / Checkpoint / 156-585

Checkpoint 156-585 Practice Test - Questions Answers, Page 3

Question list

List of questions

Question 21

(0)

What are the main components of Check Point's Security Management architecture?

Question 22

(0)

What does SIM handle?

Question 23

(0)

VPN issues may result from misconfiguration, communication failure, or incompatible default configurations between peers Which basic command syntax needs to be used for troubleshooting Site-to-Site

Question 24

(0)

Select the technology that does the following actions - provides reassembly via streaming for TCP - handles packet reordering and congestion - handles payload overlap - provides consistent strea

Question 25

(0)

What is the kernel process for Content Awareness that collects the data from the contexts received from the CMI and decides if the file is matched by a data type?

Question 26

(0)

How can you start debug of the Unified Policy with all possible flags turned on?

Question 27

(0)

What is the purpose of the Hardware Diagnostics Tool?

Question 28

(0)

What table does the command "fwaccel conns" pull information from?

Question 29

(0)

Check Point Threat Prevention policies can contain multiple policy layers and each layer consists of its own Rule Base Which Threat Prevention daemon is used for Anti-virus?

Question 30

(0)

What command is used to find out which port Multi-Portal has assigned to the Mobile Access Portal?

Related questions

You need to run a kernel debug over a longer period of time as the problem occurs only once or twice a week. Therefore, you need to add a timestamp to the kernel debug and write the output to a file but you can’t afford to fill up all the remaining disk space and you only have 10 GB free for saving the debugs. What is the correct syntax for this?

What is the name of the VPN kernel process?

The two procedures available for debugging in the firewall kernel are i fw ctl zdebug ii fw ctl debug/kdebug Choose the correct statement explaining the differences in the two

URL Filtering is an essential part of Web Security in the Gateway. For the Security Gateway to perform a URL lookup when a client makes a URL request, where is the sync-request forwarded from if a sync-request is required''

What command is used to find out which port Multi-Portal has assigned to the Mobile Access Portal?

You are running R80.XX on an open server and you see a high CPU utilization on your 12 CPU cores You now want to enable Hyperthreading to get more cores to gain some performance. What is the correct way to achieve this?

Which command is used to write a kernel debug to a file?

You are trying to establish a VPN tunnel between two Security Gateways but fail. What initial steps will you make to troubleshoot the issue

Check Point provides tools & commands to help you to identify issues about products and applications. Which Check Point command can help you to display status and statistics information for various Check Point products and applications?

Joey is configuring a site-to-site VPN with his business partner. On Joey’s site he has a Check Point R80.10 Gateway and his partner uses Cisco ASA 5540 as a gateway. Joey’s VPN domain on the Check Point Gateway object is manually configured with a group object that contains two network objects: VPN_Domain3 = 192.168.14.0/24 VPN_Domain4 = 192.168.15.0/24 Partner’s site ACL as viewed from “show run” access-list JOEY-VPN extended permit ip 172.26.251.0 255.255.255.0 192.168.14.0 255.255.255.0 access-list JOEY-VPN extended permit ip 172.26.251.0 255.255.255.0 192.168.15.0 255.255.255.0 When they try to establish VPN tunnel, it fails. What is the most likely cause of the failure given the information provided?

Question 21

What are the main components of Check Point's Security Management architecture?

Management server, management database, log server, automation server

Management server, Security Gateway. Multi-Domain Server, SmartEvent Server

Management Server. Log Server. LDAP Server, Web Server

Management server Log server, Gateway server. Security server

Show Answer Comment (0)

Question 22

What does SIM handle?

Accelerating packets

FW kernel to SXL kernel hand off

OPSEC connects to SecureXL

Hardware communication to the accelerator

Show Answer Comment (0)

VPN issues may result from misconfiguration, communication failure, or incompatible default configurations between peers Which basic command syntax needs to be used for troubleshooting Site-to-Site VPN Issues?

vpn debug truncon

fw debug truncon

cp debug truncon

vpn truncon debug

Show Answer Comment (0)

Question 24

Select the technology that does the following actions

- provides reassembly via streaming for TCP

- handles packet reordering and congestion

- handles payload overlap

- provides consistent stream of data to protocol parsers

Passive Streaming Library

Context Management

Pre-Protocol Parser

fwtcpstream

Show Answer Comment (0)

Question 25

What is the kernel process for Content Awareness that collects the data from the contexts received from the CMI and decides if the file is matched by a data type?

dlpda

dlpu

cntmgr

cntawmod

Show Answer Comment (0)

Question 26

How can you start debug of the Unified Policy with all possible flags turned on?

fw ctl debug -m UP all

fw ctl debug -m UnifiedPolicy all

fw ctl debug -m fw + UP

fw ctl debug -m UP *

Show Answer Comment (0)

Question 27

What is the purpose of the Hardware Diagnostics Tool?

Verifying that Check Point Appliance hardware is functioning correctly

Verifying the Security Management Server hardware is functioning correctly

Verifying that Security Gateway hardware is functioning correctly

Verifying that Check Point Appliance hardware is actually broken

Show Answer Comment (0)

Question 28

What table does the command "fwaccel conns" pull information from?

fwxl_conns

SecureXLCon

cphwd_db

sxl_connections

Show Answer Comment (0)

Question 29

Check Point Threat Prevention policies can contain multiple policy layers and each layer consists of its own Rule Base Which Threat Prevention daemon is used for Anti-virus?

in.emaild.mta

in.msd

ctasd

in emaild

Show Answer Comment (0)