Home / Checkpoint / 156-585

Checkpoint 156-585 Practice Test - Questions Answers, Page 5

Question list

List of questions

Question 41

(0)

Which of the following is NOT a valid "fwaccel" parameter?

Question 42

(0)

Which Daemon should be debugged for HTTPS Inspection related issues?

Question 43

(0)

Which situation triggers an IPS bypass under load on a 24-core Check Point appliance?

Question 44

(0)

Which of the following inputs is suitable for debugging HTTPS inspection issues?

Question 45

(0)

What is the correct syntax to turn a VPN debug on and create new empty debug files?

Question 46

(0)

If IPS protections that prevent SecureXL from accelerating traffic, such as Network Quota, Fingerprint Scrambling. TTL Masking etc, have to be used, what is a recommended practice to enhance the per

Question 47

(0)

Check Point Access Control Daemons contains several daemons for Software Blades and features Which Daemon is used for Application & Control URL Filtering?

Question 48

(0)

Where will the usermode core files be located?

Question 49

(0)

Check Point's PostgreSQL is partitioned into several relational database domains. Which domain contains network objects and security policies?

Question 50

(0)

What are the four ways to insert an FW Monitor into the firewall kernel chain?

Related questions

What is the name of the VPN kernel process?

The two procedures available for debugging in the firewall kernel are i fw ctl zdebug ii fw ctl debug/kdebug Choose the correct statement explaining the differences in the two

You need to run a kernel debug over a longer period of time as the problem occurs only once or twice a week. Therefore, you need to add a timestamp to the kernel debug and write the output to a file but you can’t afford to fill up all the remaining disk space and you only have 10 GB free for saving the debugs. What is the correct syntax for this?

URL Filtering is an essential part of Web Security in the Gateway. For the Security Gateway to perform a URL lookup when a client makes a URL request, where is the sync-request forwarded from if a sync-request is required''

What command is used to find out which port Multi-Portal has assigned to the Mobile Access Portal?

You are running R80.XX on an open server and you see a high CPU utilization on your 12 CPU cores You now want to enable Hyperthreading to get more cores to gain some performance. What is the correct way to achieve this?

Which command is used to write a kernel debug to a file?

You are trying to establish a VPN tunnel between two Security Gateways but fail. What initial steps will you make to troubleshoot the issue

Check Point provides tools & commands to help you to identify issues about products and applications. Which Check Point command can help you to display status and statistics information for various Check Point products and applications?

Joey is configuring a site-to-site VPN with his business partner. On Joey’s site he has a Check Point R80.10 Gateway and his partner uses Cisco ASA 5540 as a gateway. Joey’s VPN domain on the Check Point Gateway object is manually configured with a group object that contains two network objects: VPN_Domain3 = 192.168.14.0/24 VPN_Domain4 = 192.168.15.0/24 Partner’s site ACL as viewed from “show run” access-list JOEY-VPN extended permit ip 172.26.251.0 255.255.255.0 192.168.14.0 255.255.255.0 access-list JOEY-VPN extended permit ip 172.26.251.0 255.255.255.0 192.168.15.0 255.255.255.0 When they try to establish VPN tunnel, it fails. What is the most likely cause of the failure given the information provided?

Question 41

Which of the following is NOT a valid "fwaccel" parameter?

stat

stats

templates

packets

Show Answer Comment (0)

Question 42

Which Daemon should be debugged for HTTPS Inspection related issues?

FWD

HTTPD

WSTLSO

VPND

Show Answer Comment (0)

Question 43

Which situation triggers an IPS bypass under load on a 24-core Check Point appliance?

any of the CPU cores is above the threshold for more than 10 seconds

all CPU core most be above the threshold for more than 10 seconds

a single CPU core must be above the threshold for more than 10 seconds, but is must be the same core during this time

the average cpu utilization over all cores must be above the threshold for 1 second

Show Answer Comment (0)

Question 44

Which of the following inputs is suitable for debugging HTTPS inspection issues?

vpn debug cptls on

fw ctl debug –m fw + conn drop cptls

fw diag debug tls enable

fw debug tls on TDERROR_ALL_ALL=5

Show Answer Comment (0)

Question 45

What is the correct syntax to turn a VPN debug on and create new empty debug files?

vpn debug truncon

vpndebug trunc on

vpn kdebug on

vpn debug trunkon

Show Answer Comment (0)

If IPS protections that prevent SecureXL from accelerating traffic, such as Network Quota, Fingerprint Scrambling. TTL Masking etc, have to be used, what is a recommended practice to enhance the performance of the gateway?

Use the IPS exception mechanism

Disable all such protections

Disable SecureXL and use CoreXL

Upgrade the hardware to include more Cores and Memory

Show Answer Comment (0)

Question 47

Check Point Access Control Daemons contains several daemons for Software Blades and features Which Daemon is used for Application & Control URL Filtering?

rad

cprad

pepd

pdpd

Show Answer Comment (0)