Home / Checkpoint / 156-585

Checkpoint 156-585 Practice Test - Questions Answers, Page 9

Question list

List of questions

Question 81

(0)

How can you increase the ring buffer size to 1024 descriptors?

Question 82

(0)

What are four main database domains?

Question 83

(0)

Which command can be run in Expert mode to verify the core dump settings?

Question 84

(0)

What process is responsible for sending and receiving logs in the management server?

Question 85

(0)

What is the best way to resolve an issue caused by a frozen process?

Question 86

(0)

What is the difference in debugging a S2S or C2S (using Check Point VPN Client) VPN?

Question 87

(0)

What process monitors, terminates, and restarts critical Check Point processes as necessary?

Question 88

(0)

The Check Point Firewall Kernel is the core component of the Gala operating system and an integral part of traffic inspection process. There are two procedures available for debugging the firewall k

Question 89

(0)

Question 90

(0)

Which kernel process is used by Content Awareness to collect the data from contexts?

Related questions

The two procedures available for debugging in the firewall kernel are i fw ctl zdebug ii fw ctl debug/kdebug Choose the correct statement explaining the differences in the two

You need to run a kernel debug over a longer period of time as the problem occurs only once or twice a week. Therefore, you need to add a timestamp to the kernel debug and write the output to a file but you can’t afford to fill up all the remaining disk space and you only have 10 GB free for saving the debugs. What is the correct syntax for this?

What is the name of the VPN kernel process?

URL Filtering is an essential part of Web Security in the Gateway. For the Security Gateway to perform a URL lookup when a client makes a URL request, where is the sync-request forwarded from if a sync-request is required''

What command is used to find out which port Multi-Portal has assigned to the Mobile Access Portal?

You are running R80.XX on an open server and you see a high CPU utilization on your 12 CPU cores You now want to enable Hyperthreading to get more cores to gain some performance. What is the correct way to achieve this?

Which command is used to write a kernel debug to a file?

You are trying to establish a VPN tunnel between two Security Gateways but fail. What initial steps will you make to troubleshoot the issue

Check Point provides tools & commands to help you to identify issues about products and applications. Which Check Point command can help you to display status and statistics information for various Check Point products and applications?

Joey is configuring a site-to-site VPN with his business partner. On Joey’s site he has a Check Point R80.10 Gateway and his partner uses Cisco ASA 5540 as a gateway. Joey’s VPN domain on the Check Point Gateway object is manually configured with a group object that contains two network objects: VPN_Domain3 = 192.168.14.0/24 VPN_Domain4 = 192.168.15.0/24 Partner’s site ACL as viewed from “show run” access-list JOEY-VPN extended permit ip 172.26.251.0 255.255.255.0 192.168.14.0 255.255.255.0 access-list JOEY-VPN extended permit ip 172.26.251.0 255.255.255.0 192.168.15.0 255.255.255.0 When they try to establish VPN tunnel, it fails. What is the most likely cause of the failure given the information provided?

Question 81

How can you increase the ring buffer size to 1024 descriptors?

set interface eth0 rx-ringsize 1024

fw ctl int rx_ringsize 1024

echo rx_ringsize=1024>>/etc/sysconfig/sysctl.conf

dbedit>modify properties firewall_properties rx_ringsize 1024

Show Answer Comment (0)

Question 82

What are four main database domains?

System, Global, Log, Event

System, User, Host, Network

Local, Global, User, VPN

System, User, Global, Log

Show Answer Comment (0)

Question 83

Which command can be run in Expert mode to verify the core dump settings?

grep cdm /config/db/coredump

grep cdm /config/db/initial

grep $FWDIR/config/db/initial

cat /etc/sysconfig/coredump/cdm.conf

Show Answer Comment (0)

Question 84

What process is responsible for sending and receiving logs in the management server?

FWD

CPM

FWM

CPD

Show Answer Comment (0)

Question 85

What is the best way to resolve an issue caused by a frozen process?

Reboot the machine

Restart the process

Kill the process

Power off the machine

Show Answer Comment (0)

Question 86

What is the difference in debugging a S2S or C2S (using Check Point VPN Client) VPN?

there is no difference

the C2S VPN uses a different VPN daemon and there a second VPN debug

the C2S VPN can not be debugged as it uses different protocols for the key exchange

the C2S client uses Browser based SSL vpn and can’t be debugged

Show Answer Comment (0)

Question 87

What process monitors, terminates, and restarts critical Check Point processes as necessary?

CPWD

CPM

FWD

FWM

Show Answer Comment (0)

The Check Point Firewall Kernel is the core component of the Gala operating system and an integral part of traffic inspection process. There are two procedures available for debugging the firewall kernel. Which procedure/command is used for detailed troubleshooting and needs more resources?

fw ctl debug/kdebug

fw ctl zdebug

fw debug/kdebug

fw debug/kdebug ctl

Show Answer Comment (0)

Question 89

Joey is configuring a site-to-site VPN with his business partner. On Joey’s site he has a Check Point R80.10 Gateway and his partner uses Cisco ASA 5540 as a gateway.

Joey’s VPN domain on the Check Point Gateway object is manually configured with a group object that contains two network objects:

VPN_Domain3 = 192.168.14.0/24

VPN_Domain4 = 192.168.15.0/24

Partner’s site ACL as viewed from “show run” access-list JOEY-VPN extended permit ip 172.26.251.0 255.255.255.0 192.168.14.0 255.255.255.0 access-list JOEY-VPN extended permit ip 172.26.251.0 255.255.255.0 192.168.15.0 255.255.255.0 When they try to establish VPN tunnel, it fails. What is the most likely cause of the failure given the information provided?

Tunnel falls on partner site. It is likely that the Cisco ASA 5540 will reject the Phase 2 negotiation.Check Point continues to present its own encryption domain as 192.168.14.0/24 and 192.168.15.0/24, but the peer expects the one network 192.168.14.0/23

Tunnel fails on partner site. It is likely that the Cisco ASA 5540 will reject the Phase 2 negotiation.Check Point continues to present its own encryption domain as 192.168.14.0/23, but the peer expects the two distinct networks 192.168.14.0/24 and 192.168.15.0/24.

Tunnel fails on Joey’s site, because he misconfigured IP address of VPN peer.

Tunnel falls on partner site. It is likely that the Cisco ASA 5540 will reject the Phase 2 negotiation due to the algorithm mismatch.

Show Answer Comment (0)