How does Identity Collector connect to Windows Server?

ADQuery is needed for connection

You run a free-command on a gateway and notice that the Swap column is not zero Choose the best answer

Utilization of ram is high and swap file had to be used

Swap file is used regularly because RAM memory is reserved for management traffic

Swap memory is used for heavy connections when RAM memory is full

Its ole Swap is used to increase performance

You modified kernel parameters and after rebooting the gateway, a lot of production traffic gets dropped and the gateway acts strangely What should you do'?

Restore fwkem.conf from backup and reboot the gateway

Run command fw ctl set int fw1_kernel_all_disable=1

Restore fwkem.conf from backup and reboot the gateway

run fw unloadlocal to remove parameters from kernel

Remove all kernel parameters from fwkem.conf and reboot

What is the function of the Core Dump Manager utility?

To limit the number of core dump files per process as well as the total amount of disk space used by core files

To determine which process is slowing down the system

To send crash information to an external analyzer

To limit the number of core dump files per process as well as the total amount of disk space used by core files

To generate a new core dump for analysis

What is the proper command for allowing the system to create core files?

set core-dump enable >save config

SFWDIR/scripts/core-dump-enable.sh

set core-dump enable >save config

# set core-dump enable # save config

You receive reports from multiple users that they cannot browse Upon further discovery you identify that Identity Awareness cannot identify the users properly and apply the configuredAccess RolesWhat commands you can use to troubleshoot all identity collectors and identity providers from the command line?

on the gateway: pdp debug set IDC all IDP all

on the gateway: pdp debug set AD all and IDC all

on the management: pdp debug on IDC all

on the management: pdp debug set all

What is NOT a benefit of the 'fw ctl zdebug' command?

Cannot be used to debug additional modules

Automatically allocate a 1MB buffer

Collect debug messages from the kernel

Cannot be used to debug additional modules

When debugging is enabled on firewall kernel module using the fw ctl debug' command with required options, many debug messages are provided by the kernel that help the administrator to identify Issues. Which of the following is true about these debug messages generated by the kernel module?

Messages are written to a buffer and collected using 'fw ctl kdebug

Messages are written to /etc/dmesg file

Messages are written to a buffer and collected using 'fw ctl kdebug

Messages are written to console and also /var/log/messages file

During firewall kernel debug with fw ctl zdebug you received less information that expected. You noticed that a lot of messages were lost since the time the debug was started. What should you do to resolve this issue?

Increase debug buffer Use fw ctl debug -buf 32768

Redirect debug output to file; Use fw ctl debug -o /debug.elg

Redirect debug output to file; Use fw ctl zdebug -o /debug.elg

Increase debug buffer; Use fw ctl zdebug -buf 32768

You need to run a kernel debug over a longer period of time as the problem occurs only once or twice a week. Therefore you need to add a timestamp to the kernel debug and write the output to a file but you cant afford to fill up all the remaining disk space and you only have 10 GB free for saving the debugs What is the correct syntax for this?

A fw ctl kdebug -T -f -m 10 -s 1000000 -o debugfilename

fw ctl debug -T -f-m 10 -s 1000000 -o debugfilename

fw ctl kdebug -T -f -m 10 -s 1000000 > debugfilename

fw ctl kdebug -T -m 10 -s 1000000 -o debugfilename

What command is usually used for general firewall kernel debugging and what is the size of the buffer that is automatically enabled when using the command?

fw ctl zdebug, buffer size is 32768 KB

fw ctl debug, buffer size is 1024 KB

fw ctl zdebug, buffer size is 1 MB

fw ctl kdebug, buffer size is 32000 KB

fw ctl zdebug, buffer size is 32768 KB

You need to run a kernel debug over a longer period of time as the problem occurs only once or twice a week Therefore you need to add a timestamp to the kernel debug and write the output to a file. What is the correct syntax for this?

fw ctl kdebug -T -f -o filename debug

fw ctl debug -T -f > filename debug

fw ctl kdebug -T -f -o filename debug

fw ell kdebug -T > filename debug

fw ctl kdebug -T -f > filename.debug

What is the benefit of fw ctl debug over fw ctl zdebug?

It allows you to debug multiple modules at the same time

There is no difference Both are used for debugging kernel

It allows you to debug multiple modules at the same time

Which command is used to write a kernel debug to a file?

fw ctl kdebug -T -f > debug.txt

fw ctl kdebug -T -I > debug.txt

fw ctl kdebug -T -f > debug.txt

How can you start debug of the Unified Policy with all possible flags turned on?

fw ctl debug -m UnifiedPolicy all

The FileApp parser in the Content Awareness engine does not extract text from which of the following file types?

Microsoft Office PowerPoint files

In Check Point's Packet Processing Infrastructure what is the role of Observers?

Observers monitor the state of Check Point gateways and report it to the security manager

Observers attach object IDs to traffic

They store Rule Base matching state related information

Observers monitor the state of Check Point gateways and report it to the security manager

Observers decide whether or not to publish a CLOB to the Security Policy

What does CMI stand for in relation to the Access Control Policy?

Content Matching Infrastructure

What is correct about the Resource Advisor (RAD) service on the Security Gateways?

RAD has a kernel module that looks up the kernel cache notifies client about hits and misses and forwards a-sync requests to RAD user space module which is responsible for online categorization

RAD is not a separate module, it is an integrated function of the 'fw' kernel module and does all operations in the kernel space

RAD functions completely in user space The Pattern Matter (PM) module of the CMI looks up for URLs in the cache and if not found, contact the RAD process in user space to do online categorization

RAD is completely loaded as a kernel module that looks up URL in cache and if not found connects online for categorization There is no user space involvement in this process

RAD has a kernel module that looks up the kernel cache notifies client about hits and misses and forwards a-sync requests to RAD user space module which is responsible for online categorization

Checkpoint 156-587 Practice Test 1 - Free Online Exam Prep & Questions

What components make up the Context Management Infrastructure?

CPMI and FW Loader

CPX and FWM

CPM and SOLR

CMI Loader and Pattern Matcher

Comment (0)

Checkpoint 156-587 Practice Test 1

Question

Checkpoint 156-587 Practice Tests

Practice Tests