An administrator receives reports about issues with log indexing and text searching regarding an existing Management Server. In trying to find a solution she wants to check if the process responsible for this feature is running correctly. What is true about the related process?

cpd needs to be restarted manual to show in the list

fwm manaqes this database after initialization of the 1CA

fwssd crashes can affect therefore not show in the list

If the cpsemd process of SmartEvent has crashed or is having trouble coming up, then it usually indicates that __________.

The SmartEvent core on the Solr indexer has been deleted

The loqqed in administrator does not have permissions to run SmartEvent

Cpd daemon is unable to connect to the log server

Your users are having trouble opening a Web page and you need to troubleshoot it. You open the Smart Console, and you get the following message when you navigate to the Logs and Monitor 'SmartLog is not active or Failed to parse results from server'. What is the first thing you can try to resolve it?

Run the commands on the SMS: smartlogstart and smartlogstop

smartlog debug on and smartlog debug off

You do not see logs in the SMS. When you login on the SMS shell and run cpwd_admin list you notice that the RFL process is with status T. What command can you run to try to resolve it?

smartlog_server stop and smartlog_server restart

Where do you enable log indexing on the SMS?

SMS object under 'General Properties'

That is the proper command for allowing the system to create core files?

> set core-dump enable > save config

$FWDIR/scripts/core-dump-enable.sh

# set core-dump enable # save config

> set core-dump enable > save config

What is correct about the Resource Advisor (RAD) service on the Security Gateways?

RAD has a kernel module that looks up the kernel cache, notifies client about hits and misses and forwards a-sync requests to RAD user space module which is responsible for online categorization

RAD functions completely in user space. The Pattern Matter (PM) module of the CMI looks up for URLs in the cache and if not found, contact the RAD process in user space to do online categorization

RAD is completely loaded as a kernel module that looks up URL in cache and if not found connects online for categorization. There is no user space involvement in this process

RAD is not a separate module, it is an integrated function of the W kernel module and does all operations in the kernel space

RAD has a kernel module that looks up the kernel cache, notifies client about hits and misses and forwards a-sync requests to RAD user space module which is responsible for online categorization

Which of the following is contained in the System Domain of the Postgres database?

Configuration data of log servers

User modified configurations such as network objects

The Check Point Watch Daemon (CPWD) monitors critical Check Point processes, terminating them or restarting them as needed to maintain consistent, stable operating conditions. When checking the status/output of CPWD you are able to see some columns like APP, PID, STAT, START, etc. What is the column 'STAT' used for?

Shows the status of the monitored process

Shows the Watch Dog name of the monitored process

Shows the status of the monitored process

Shows how many times the Watch Dog started the monitored process

Shows what monitoring method Watch Dog is using to track the process

What does CMI stand for in relation to the Access Control Policy?

Context Management Infrastructure

Content Matching Infrastructure

Context Management Infrastructure

During firewall kernel debug with fw ctl zdebug you received less information that expected. You noticed that a lot of messages were lost since the time the debug was started. What should you do to resolve this issue?

Increase debug buffer; Use fw ctl debug -buf 32768

Redirect debug output to file; Use fw ctl debug -o ./debug.elg

Redirect debug output to file; Use fw ctl zdebug -o ./debug.elg

Increase debug buffer; Use fw ctl zdebug -buf 32768

Troubleshooting issues with Mobile Access requires the following:

'ma_vpnd' process on Security Gateway

Standard VPN debugs and packet captures on Security Gateway, debugs of 'cvpnd' process on Security Management

Debug logs of FWD captured with the command - 'fw debug fwd on TDERROR_MOBILE_ACCESS=5'

'ma_vpnd' process on Security Gateway

Standard VPN debugs, packet captures, and debugs of 'cvpnd' process on Security Gateway

You receive reports from multiple users that they cannot browse. Upon further discovery you identify that Identity Awareness cannot identify the users properly and apply the configured Access Roles. What commands you can use to troubleshoot all identity collectors and identity providers from the command line?

Ion the gateway: pdp debug set IDC all IDP all

on the gateway: pdp debug set AD all and IDC all

on the management: pdp debug on IDC all

on the management: pdp debug set all all

Ion the gateway: pdp debug set IDC all IDP all

What are the main components of Check Point's Security Management architecture?

Management server, management database, log server, automation server

Management server, Log server. Gateway server. Security server

Management server, management database, log server, automation server

Management server. Security Gateway. Multi-Domain Server. SmartEvent Server

Management server. Log Server, LDAP Server, Web Server

The management configuration stored in the Postgres database is partitioned into several relational database domains. What is the purpose of the Global Domain?

This domain is used as the global database to back up the objects referencing the corresponding object attributes from the System Domain.

Global Domains is used by the IPS software blade to map the IDs to the corresponding countries according to the IpToCountry.csv file.

This domain is used as the global database to back up the objects referencing the corresponding object attributes from the System Domain.

This domain is used as the global database to track the changes made by multiple administrators on the same objects prior to publishing.

This domain is used as the global database for MDSM and contains global objects and policies.

Checkpoint 156-586 Practice Test 1 - Free Online Exam Prep & Questions

When viewing data for CPMI objects in the Postgres database, what table column should be selected to query for the object instance?

CpmiHostCkp

fwset

CPM Global M

GuiDBedit

Comment (0)

Checkpoint 156-586 Practice Test 1

Question

Checkpoint 156-586 Practice Tests

Practice Tests