After kernel debug with 'fw ctl debug' you received a huge amount of information. It was saved in a very large file that is difficult to open and analyze with standard text editors. Suggest a solution to solve this issue.

Divide debug information into smaller files. Use 'fw ctl kdebug -f -o 'filename' -m 25 - s '1024'

Use 'fw ctl zdebug' because of 1024KB buffer size

Use Check Point InfoView utility to analyze debug output

Reduce debug buffer to 1024KB and run debug for several times

Which of the following inputs is suitable for debugging HTTPS inspection issues?

fw ctl debug -m fw + conn drop cptls

fw debug tls on TDERROR_ALL_ALL=5

fw ctl debug -m fw + conn drop cptls

The two procedures available for debugging in the firewall kernel arei. fw ctl zdebugii. fw ctl debug/kdebugChoose the correct statement explaining the differences in the two

(i) is used for general debugging, has a small buffer and is a quick way to set kernel debug flags to getan output via command line whereas (ii) is useful when there is a need for detailed debugging and requires additional steps to set the buffer and get an output via command line

(i) is used to debug only issues related to dropping of traffic, however (ii) can be used for any firewall issue including NATing, clustering etc.

(i) is used to debug the access control policy only, however (ii) can be used to debug a unified policy

(i) is used on a Security Gateway, whereas (ii) is used on a Security Management Server

(i) is used for general debugging, has a small buffer and is a quick way to set kernel debug flags to getan output via command line whereas (ii) is useful when there is a need for detailed debugging and requires additional steps to set the buffer and get an output via command line

In Check Point's Packet Processing Infrastructure, what is the role of Observers?

Observers attach object IDs to traffic

They store Rule Base matching state related information

Observers monitor the state of Check Point gateways and report it to the security manager

Observers attach object IDs to traffic

Observers decide whether or not to publish a CLOB to the Security Policy

You need to run a kernel debug over a longer period of time as the problem occurs only once or twice a week. Therefore, you need to add a timestamp to the kernel debug and write the output to a file but you can't afford to fill up all the remaining disk space and you only have 10 GB free for saving the debugs. What is the correct syntax for this?

fw ctl kdebug -T -f -m 10 -s 1000000 -o debugfilename

fw ctl debug -T -f -m 10 -s 1000000 -o debugfilename

fw ctl kdebug -T -f -m 10 -s 1000000 > debugfilename

fw ctl kdebug -T -f -m 10 -s 1000000 -o debugfilename

fw ctl kdebug-T -m 10 -s 1000000 -o debugfilename

How can you start debug of the Unified Policy with all possible flags turned on?

fw ctl debuq -m UnifiedPolicv all

You receive reports that Users cannot browse internet sites. You are using identity awareness with AD Query and Identity Collector in addition you have the Browser Based Authentication Enabled. What command can be used to debug the problem?

on the gateway: pdp debug nac extended

on the gateway: ad query debug on

on the management: ad query debug extended

on the gateway: pdp debug nac extended

The FileApp parser in the Content Awareness engine does not extract text from which of the following file types?

Microsoft Office Powerpoint files

John has renewed his NPTX License but he gets an error (contract for Anti-Bot expired). He wants to check the subscription status on the CLI of the gateway, what command can he use for this?

cpstat antimalware-f subscription status

What command(s) will turn off all vpn debug collection?

vpn debug off and vpn debug ikeoff

What information does the doctor-log script supply?

Current and daily average logging rates. Indexing status, Size

Logging errors. Exceptions, Repair options

Current and daily average logging rates. Indexing status, Size

Logging rates. Logging Directories, List of troubleshooting tips

Repair options. Logging Rates, Logging Directories

If SmartLog is not active or failed to parse results from server, what commands can be run to re-enable the service?

smartlogrestart and smartlogstart

smartlogstart and smartlogsetup

What is NOT a benefit of the 'fw ctl zdebug' command?

Cannot be used to debug additional modules

Collect debug messages from the kernel

Automatically allocate a 1MB buffer

What are the three main component of Identity Awareness?

Identity Source, Identity Server (PDP) and Identity Enforcement (PEP)

User, Active Directory and Access Role

Identity Awareness Blade on Security Gateway, User Database on Security Management Server and Active Directory

Identity Source, Identity Server (PDP) and Identity Enforcement (PEP)

Your users have some issues connecting with Mobile Access VPN to your gateway. How can you debug the tunnel establishment?

run fw ctl zdebug -m sslvpn all

in the file $CVPNDIR/conf/httpd.conf change the line Loglevel .. To LogLevel debug and run cvpnrestart

in the file $VPNDIR/conf/httpd.conf change the line Loglevel .. To LogLevel debug and run vpn restart

run fw ctl zdebug -m sslvpn all

Checkpoint 156-586 Practice Test 2 - Free Online Exam Prep & Questions

What is the simplest and most efficient way to check all dropped packets in real time?

tail -f $FWDIR/log/fw.log |grep drop in expert mode

cat /dev/fw1/log in expert mode

fw ctl zdebug + drop in expert mode

Smartlog

Comment (0)

Checkpoint 156-586 Practice Test 2

Question

Checkpoint 156-586 Practice Tests

Practice Tests