Where do you enable log indexing on the SMS?

SMS object under 'General Properties'

John has renewed his NPTX License but he gets an error (contract for Anti-Bot expired). He wants to check the subscription status on the CLI of the gateway, what command can he use for this?

cpstat antimalware-f subscription status

What information does the doctor-log script supply?

Current and daily average logging rates. Indexing status, Size

Logging errors. Exceptions, Repair options

Current and daily average logging rates. Indexing status, Size

Logging rates, Logging Directories, List of troubleshooting tips

Repair options. Logging Rates, Logging Directories

If SmartLog is not active or failed to parse results from server, what commands can be run to re-enable the service?

smartlogrestart and smartlogstart

smartlogstart and smartlogsetup

What are the main components of Check Point's Security Management architecture?

Management server, management database, log server, automation server

Management server, Log server, Gateway server. Security server

Management server, management database, log server, automation server

Management server. Security Gateway. Multi-Domain Server. SmartEvent Server

Management server. Log Server, LDAP Server, Web Server

If the cpsemd process of SmartEvent has crashed or is having trouble coming up, then it usually indicates that __________.

The SmartEvent core on the Solr indexer has been deleted

The loqqed in administrator does not have permissions to run SmartEvent

Cpd daemon is unable to connect to the log server

The management configuration stored in the Postgres database is partitioned into several relational database domains. What is the purpose of the Global Domain?

This domain is used as the global database for MDSM and contains global objects and policies.

Global Domains is used by the IPS software blade to map the IDs to the corresponding countries according to the IpToCountry.csv file.

This domain is used as the global database to back up the objects referencing the corresponding object attributes from the System Domain.

This domain is used as the global database to track the changes made by multiple administrators on the same objects prior to publishing.

This domain is used as the global database for MDSM and contains global objects and policies.

What is the simplest and most efficient way to check all dropped packets in real time?

fw ctl zdebug + drop in expert mode

tail -f $FWDIR/log/fw.log |grep drop in expert mode

cat /dev/fw1/log in expert mode

fw ctl zdebug + drop in expert mode

Which of the following inputs is suitable for debugging HTTPS inspection issues?

fw debug tls on TDERROR_ALL_ALL=5

fw ctl debug -m fw + conn drop cptls

You receive reports that Users cannot browse internet sites. You are using identity awareness with AD Query and Identity Collector in addition you have the Browser Based Authentication Enabled. What command can be used to debug the problem?

on the gateway: pdp debug nac extended

on the gateway: ad query debug on

on the management: ad query debug extended

on the gateway: pdp debug nac extended

You run cpwd_admin list on a Security Gateway and notice that the CPM process is not listed. Select the best answer.

The output is different between Gateway and Management Server.

CPM is not running and can't be monitored by WatchDog.

If you want to monitor CPM, you have to manually add it to WatchDog.

CPM is not there because it has its own monitoring system. Only lower processes are monitored by WatchDog.

Which two files contain the Application Database on the Security Gateway?

application_db.C and application_custom_db.C

RAD is initiated when Application Control and URL Filtering blades are active on the Security Gateway. What is the purpose of the following RAD configuration file $FWDIR/conf/rad_settings.C?

This file contains RAD proxy settings

This file contains the location information for Application Control and/or URL Filtering entitlements

This file contains the information on how the Security Gateway reaches the Security Management Server's RAD service for Application Control and URL Filtering

This file contains RAD proxy settings

This file contains all the host name settings for the online application detection engine

The two procedures available for debugging in the firewall kernel arei. fw ctl zdebugii. fw ctl debug/kdebugChoose the correct statement explaining the differences in the two

(i) is used for general debugging, has a small buffer and is a quick way to set kernel debug flags to getan output via command line whereas (ii) is useful when there is a need for detailed debugging and requires additional steps to set the buffer and get an output via command line

(i) is used to debug only issues related to dropping of traffic, however (ii) can be used for any firewall issue including NATing, clustering etc.

(i) is used to debug the access control policy only, however (ii) can be used to debug a unified policy

(i) is used on a Security Gateway, whereas (ii) is used on a Security Management Server

(i) is used for general debugging, has a small buffer and is a quick way to set kernel debug flags to getan output via command line whereas (ii) is useful when there is a need for detailed debugging and requires additional steps to set the buffer and get an output via command line

Checkpoint 156-587 Practice Test 3 - Free Online Exam Prep & Questions

Spam

Selling illegal goods, money scams etc.

Hate Speech

Serious attack on a group.

Harassment and bullying

Harassing an individual (including doxing)

Harmful activities

Threatening or glorifying violence or serious harm, including self-harm

Adult content (Consensual)

Nudity/Sexual content

Sexual exploitation and abuse (child safety)

Sexually explicit or suggestive imagery or writing involving minors

Sexual exploitation and abuse (adults and animals)

Sexually explicit or suggestive imagery or writing involving non-consenting adults or non-humans

Plagiarism

Reusing content without attribution (link and blockquotes)

Poorly written

Not in English or has very bad formatting, grammar, and spelling

Inappropriate credential

Author's credential is offensive, spam, or impersonation

Other

Ex. Illegal content, incomplete question...

Checkpoint 156-587 Practice Test 3

Question

Checkpoint 156-587 Practice Tests

Practice Tests