Home / Checkpoint / 156-585

Checkpoint 156-585 Practice Test - Questions Answers, Page 8

Question list

List of questions

Question 71

(0)

Some users from your organization have been reporting some connection problems with CIFS since this morning You suspect an IPS issue after an automatic IPS update last night. So you want to perform

Question 72

(0)

Which file is commonly associated with troubleshooting crashes on a system such as the Security Gateway?

Question 73

(0)

The two procedures available for debugging in the firewall kernel are i fw ctl zdebug ii fw ctl debug/kdebug Choose the correct statement explaining the differences in the two

Question 74

(0)

What is the name of the VPN kernel process?

Question 75

(0)

You are running R80.XX on an open server and you see a high CPU utilization on your 12 CPU cores You now want to enable Hyperthreading to get more cores to gain some performance. What is the correct

Question 76

(0)

What are the maximum kernel debug buffer sizes, depending on the version

Question 77

(0)

Which daemon governs the Mobile Access VPN blade and works with VPND to create Mobile Access VPN connections? It also handles interactions between HTTPS and the Multi-Portal Daemon.

Question 78

(0)

You are trying to establish a VPN tunnel between two Security Gateways but fail. What initial steps will you make to troubleshoot the issue

Question 79

(0)

An administrator receives reports about issues with log indexing and text searching regarding an existing Management Server. In trying to find a solution she wants to check if the process responsibl

Question 80

(0)

Related questions

The two procedures available for debugging in the firewall kernel are i fw ctl zdebug ii fw ctl debug/kdebug Choose the correct statement explaining the differences in the two

You need to run a kernel debug over a longer period of time as the problem occurs only once or twice a week. Therefore, you need to add a timestamp to the kernel debug and write the output to a file but you can’t afford to fill up all the remaining disk space and you only have 10 GB free for saving the debugs. What is the correct syntax for this?

What is the name of the VPN kernel process?

URL Filtering is an essential part of Web Security in the Gateway. For the Security Gateway to perform a URL lookup when a client makes a URL request, where is the sync-request forwarded from if a sync-request is required''

What command is used to find out which port Multi-Portal has assigned to the Mobile Access Portal?

You are running R80.XX on an open server and you see a high CPU utilization on your 12 CPU cores You now want to enable Hyperthreading to get more cores to gain some performance. What is the correct way to achieve this?

Which command is used to write a kernel debug to a file?

You are trying to establish a VPN tunnel between two Security Gateways but fail. What initial steps will you make to troubleshoot the issue

Check Point provides tools & commands to help you to identify issues about products and applications. Which Check Point command can help you to display status and statistics information for various Check Point products and applications?

Joey is configuring a site-to-site VPN with his business partner. On Joey’s site he has a Check Point R80.10 Gateway and his partner uses Cisco ASA 5540 as a gateway. Joey’s VPN domain on the Check Point Gateway object is manually configured with a group object that contains two network objects: VPN_Domain3 = 192.168.14.0/24 VPN_Domain4 = 192.168.15.0/24 Partner’s site ACL as viewed from “show run” access-list JOEY-VPN extended permit ip 172.26.251.0 255.255.255.0 192.168.14.0 255.255.255.0 access-list JOEY-VPN extended permit ip 172.26.251.0 255.255.255.0 192.168.15.0 255.255.255.0 When they try to establish VPN tunnel, it fails. What is the most likely cause of the failure given the information provided?

Question 71

Some users from your organization have been reporting some connection problems with CIFS since this morning You suspect an IPS issue after an automatic IPS update last night. So you want to perform a packet capture on uppercase I only directly after the IPS chain module (position 4 in the chain) to check If the packets pass the IPS. What command do you need to run?

fw monitor -ml -pi 5 -e <filterexperession>

fw monitor -pi 5 -e <filterexptession>

tcpdump -eni any <filterexpression>

fw monitor -pi asm <filtefexpfession>

Show Answer Comment (0)

Question 72

Which file is commonly associated with troubleshooting crashes on a system such as the Security Gateway?

core dump

CPMIL dump

fw monitor

tcpdump

Show Answer Comment (0)

Question 73

The two procedures available for debugging in the firewall kernel are i fw ctl zdebug ii fw ctl debug/kdebug Choose the correct statement explaining the differences in the two

(i) Is used for general debugging, has a small buffer and is a quick way to set kernel debug flags to get an output via command line whereas (11) is useful when there is a need for detailed debugging and requires additional steps to set the buffer and get an output via command line

(i) is used to debug the access control policy only, however (n) can be used to debug a unified policy

(i) is used to debug only issues related to dropping of traffic, however (n) can be used for any firewall issue including NATing, clustering etc.

(i) is used on a Security Gateway, whereas (11) is used on a Security Management Server

Show Answer Comment (0)

Question 74

What is the name of the VPN kernel process?

VPNK

VPND

CVPND

FWK

Show Answer Comment (0)

Question 75

Hyperthreading is not supported on open servers, on on Check Point Appliances

just turn on HAT in the bios of the server and boot it

just turn on HAT in the bios of the server and after it has booted enable it in cpconfig

in dish run set HAT on

Show Answer Comment (0)

Question 76

What are the maximum kernel debug buffer sizes, depending on the version

8MB or 32MB

8GB or 64GB

4MB or 8MB

32MB or 64MB

Show Answer Comment (0)

Question 77

Which daemon governs the Mobile Access VPN blade and works with VPND to create Mobile Access VPN connections? It also handles interactions between HTTPS and the Multi-Portal Daemon.

Connectra VPN Daemon - cvpnd

Mobile Access Daemon - MAD

mvpnd

SSL VPN Daemon - sslvpnd

Show Answer Comment (0)

Question 78

You are trying to establish a VPN tunnel between two Security Gateways but fail. What initial steps will you make to troubleshoot the issue

capture traffic on both tunnel members and collect debug of IKE and VPND daemon

capture traffic on both tunnel members and collect kernel debug for fw module with vm, crypt, conn and drop flags, then collect debug of IKE and VPND daemon

collect debug of IKE and VPND daemon and collect kernel debug for fw module with vm, crypt, conn and drop flags

capture traffic on both tunnel members and collect kernel debug for fw module with vm, crypt, conn and drop flags

Show Answer Comment (0)

Question 79

An administrator receives reports about issues with log indexing and text searching regarding an existing Management Server. In trying to find a solution she wants to check if the process responsible for this feature is running correctly. What is true about the related process?

fwm manages this database after initialization of the ICA

cpd needs to be restarted manual to show in the list

fwssd crashes can affect therefore not show in the list

solr is a child process of cpm

Show Answer Comment (0)

Question 80

When debugging is enabled on firewall kernel module using the ‘fw ctl debug’ command with required options, many debug messages are provided by the kernel that help the administrator to identify issues. Which of the following is true about these debug messages generated by the kernel module?

Messages are written to a buffer and collected using ‘fw ctl kdebug’

Messages are written to console and also /var/log/messages file

Messages are written to /etc/dmesg file

Messages are written to $FWDIR/log/fw.elg

Show Answer Comment (0)

Total 114 questions

6 7 8 9 10

Go to page: of 12