When URL category is not found in the kernel cache, what action will GW do?

RAD In user space will forward request to the cloud

GW will update kernel cache during next policy install

RAD in kernel space will forward request to the cloud

RAD forwards this request to CMI which is the brain of inspection

You found out that $FWDIR/Iog/fw.log is constantly growing in size at a Security Gateway, what is the reason?

Its not a problem the gateways is logging connections and also sessions

fw.log can grow when GW does not have space in logging directory

You receive complains that Guest Users cannot login and use the Guest Network which is configured with Access Role of Guest Users. You need to verity the Captive Portal configuration. Where can you find the config file?

on the gateway at $NACPORTAL_ HOME/conf/httpd_ nac.conf

on the management at SCPNAC_ HOME/conf/httpd_ nac.conf

on the management at SNACPORTAL_ HOME/conf/httpd_ nac.conf

on the gateway at $CPNAC_ HOME/conf/httpd_ nac.conf

What are the three main component of Identity Awareness?

Identity Source Identity Server (POP) and Identity Enforcement (PEP)

Identity Awareness Blade on Security Gateway, User Database on Security Management Server and Active Directory

User, Active Directory and Access Role

Troubleshooting issues with Mobile Access requires the following:

Standard VPN debugs, packet captures and debugs of cvpnd1 process on Security Gateway

'ma_vpnd' process on Security Gateway

Debug logs of FWD captured with the command - 'fw debug fwd on TDERROR_MOBILE_ACCESS=5'

Standard VPN debugs, packet captures and debugs of cvpnd1 process on Security Gateway

Standard VPN debugs and packet captures on Security Gateway, debugs of 'cvpnd' process on Security Management

Your users have some issues connecting with Mobile Access VPN to your gateway. How can you debug the tunnel establishment?

in the file SCVPNDIR/conf/httpd conf change the line Loglevel To LogLevel debug and run cvpnrestart

in the file $VPNDIR/conf/httpd conf change the line Loglevel To LogLevel debug and run vpn restart

in the file SCVPNDIR/conf/httpd conf change the line Loglevel To LogLevel debug and run cvpnrestart

run fw ctl zdebug -m sslvpn all

What command(s) will turn off all vpn debug collection?

vpn debug off and vpn debug Ikeoff

Like a Site-to-Site VPN between two Security Gateways, a Remote Access VPN relies on the Internet Key Exchange (IKE) what types of keys are generated by IKE during negotiation?

Produce a pair of public and private keys

Produce a symmetric key on both sides

Produce an asymmetric key on both sides

Symmetric keys based on pre-shared secret

Produce a pair of public and private keys

After kernel debug with ''fw ctl debug you received a huge amount of information It was saved in a very large file that is difficult to open and analyze with standard text editors Suggest a solution to solve this issue

Divide debug information into smaller files. Use '' fw ctl kdebug -f -o ''filename -m 25 - s ''1024''

Reduce debug buffer to 1024KB and run debug for several times

Use Check Point InfoView utility to analyze debug output

Use ''fw ctl zdebug because of 1024KB buffer size

Divide debug information into smaller files. Use '' fw ctl kdebug -f -o ''filename -m 25 - s ''1024''

Which of the following is contained in the System Domain of the Postgres database?

Configuration data of log servers

User modified configurations such as network objects

The Check Point Watch Daemon (CPWD) monitors critical Check Point processes, terminating them or restarting them as needed to maintain consistent, stable operating conditions. When checking the status/output of CPWD you are able to see some columns like APP, PID, STAT, START, etc. What is the column 'STAT' used for?

Shows the status of the monitored process

Shows the Watch Dog name of the monitored process

Shows the status of the monitored process

Shows how many times the Watch Dog started the monitored process

Shows what monitoring method Watch Dog is using to track the process

An administrator receives reports about issues with log indexing and text searching regarding an existing Management Server. In trying to find a solution she wants to check if the process responsible for this feature is running correctly. What is true about the related process?

cpd needs to be restarted manual to show in the list

fwm manaqes this database after initialization of the 1CA

fwssd crashes can affect therefore not show in the list

How many packets are needed to establish IKEv1?

Only three packets for main mode

You want to fully investigate the VPN establishment, what will you do?

debug FWD because VPND Is child process

use vpn tu command and use option 8 to start debug

use kernel debug with fw ctl debug -m VPN all

Checkpoint 156-587 Practice Test 2 - Free Online Exam Prep & Questions

Spam

Selling illegal goods, money scams etc.

Hate Speech

Serious attack on a group.

Harassment and bullying

Harassing an individual (including doxing)

Harmful activities

Threatening or glorifying violence or serious harm, including self-harm

Adult content (Consensual)

Nudity/Sexual content

Sexual exploitation and abuse (child safety)

Sexually explicit or suggestive imagery or writing involving minors

Sexual exploitation and abuse (adults and animals)

Sexually explicit or suggestive imagery or writing involving non-consenting adults or non-humans

Plagiarism

Reusing content without attribution (link and blockquotes)

Poorly written

Not in English or has very bad formatting, grammar, and spelling

Inappropriate credential

Author's credential is offensive, spam, or impersonation

Other

Ex. Illegal content, incomplete question...

Checkpoint 156-587 Practice Test 2

Question

Checkpoint 156-587 Practice Tests

Practice Tests