[2021] 156-585 PDF Questions - Perfect Prospect To Go With TrainingDump Practice Exam
CheckPoint 156-585 Pdf Questions - Outstanding Practice To your Exam
NEW QUESTION 46
The management configuration stored in the Postgres database is partitioned into several relational database Domains, like - System, User, Global and Log Domains. The User Domain stores the network objects and security policies. Which of the following is stored in the Log Domain?
- A. Active and past logs received from Gateways and Servers
- B. Active Logs received from Security Gateways and Management Servers
- C. Configuration data of Log Servers and saved queries for applications
- D. Log Domain is not stored in Postgres database, it is part of Solr indexer only
Answer: D
NEW QUESTION 47
The two procedures available for debugging in the firewall kernel are
i fw ctl zdebug
ii fw ctl debug/kdebug
Choose the correct statement explaining the differences in the two
- A. (i) is used on a Security Gateway, whereas (11) is used on a Security Management Server
- B. (i) is used to debug only issues related to dropping of traffic, however (n) can be used for any firewall issue including NATing, clustering etc.
- C. (i) is used to debug the access control policy only, however (n) can be used to debug a unified policy
- D. (i) Is used for general debugging, has a small buffer and is a quick way to set kernel debug flags to get an output via command line whereas (11) is useful when there is a need for detailed debugging and requires additional steps to set the buffer and get an output via command line
Answer: D
NEW QUESTION 48
Which of the following daemons is used for Threat Extraction?
- A. tex
- B. tedex
- C. extractd
- D. scrubd
Answer: C
NEW QUESTION 49
What acceleration mode utlizes multi-core processing to assist with traffic processing?
- A. Traffic Warping
- B. SecureXL
- C. HyperThreading
- D. CoreXL
Answer: C
NEW QUESTION 50
What table does the command "fwaccel conns" pull information from?
- A. SecureXLCon
- B. cphwd_db
- C. sxl_connections
- D. fwxl_conns
Answer: D
NEW QUESTION 51
When running a debug with fw monitor, which parameter will create a more verbose output?
- A. -0
- B. -i
- C. -i
- D. -d
Answer: D
NEW QUESTION 52
VPN's allow traffic to pass through the Internet securely byencryptingthe traffic as it enters the VPN tunnel and then decrypting the exists. Which process is responsible for Mobile VPN connections?
- A. cvpnd
- B. fwk
- C. vpnk
- D. vpnd
Answer: C
NEW QUESTION 53
What is the main SecureXL database for trackingthe acceleration status of traffic?
- A. cphwd_dev_conn_table
- B. cphwd_dev_identity_table
- C. cphwd_db
- D. cphwd_tmp1
Answer: B
NEW QUESTION 54
Which of the following is NOT a valid "fwaccel" parameter?
- A. packets
- B. stats
- C. stat
- D. templates
Answer: A
NEW QUESTION 55
Jenna has to create a VPN tunnel to a CISCO ASA but has to set special property to renegotiate the Phase 2 tunnel after 10 MB of transferee1 data.This can not be configured in the smartconsole, so how can she modify this property?
- A. this cant be done anymore as GUIDBEDIT is not supported in R80 anymore
- B. using GUIDBEDIT located in same directoryas Smartconsole on the Windows client
- C. she need to run GUIDBEDIT from CLISH which opens a graphical window on the smartcenter
- D. she need to install GUIDBEDIT which can be downloaded from the Usercenter
Answer: C
NEW QUESTION 56
Which of the following is NOT a vpn debug command used for troubleshooting?
- A. vpn debug trunc
- B. pclient getdata sslvpn
- C. fw ctl debug -m fw + conn drop vm crypt
- D. vpn debug on TDERROR_ALL_ALL=5
Answer: B
NEW QUESTION 57
Which command is most useful for debugging the fwaccel module?
- A. fwaccel dbg
- B. securexl debug
- C. fw zdebug
- D. fw debug
Answer: A
NEW QUESTION 58
What is the correct syntax to turn a VPN debug on and create new empty debug files?
- A. vpn kdebug on
- B. vpndebug trunc on
- C. vpn debug truncon
- D. vpn debug trunkon
Answer: D
NEW QUESTION 59
During firewall kernel debug with fw ctl zdebug you received less information than expected. You noticed that a lot of messages were lost since the time the debug was started. What should you do to resolve this issue?
- A. Redirect debug output to file; Use fw ctl zdebug -o ./debug.elg
- B. Redirect debug output to file; Use fw ctl debug -o ./debug.elg
- C. Increase debug buffer; Use fw ctl debug -buf 32768
- D. Increase debug buffer; Use fw ctl zdebug -buf 32768
Answer: C
NEW QUESTION 60
What is the name of the VPN kernel process?
- A. FWK
- B. CVPND
- C. VPNK
- D. VPND
Answer: C
NEW QUESTION 61
The Check Pom! Firewall Kernel is the core component of the Gaia operating system and an integral part of the traffic inspection process There are two procedures available for debugging the firewall kernel Which procedure/command is used for troubleshooting packet drops and other kernel activites while using minimal resources (1 MB buffer)?
- A. fwk ctl debug
- B. fw ctl debug/kdebug
- C. fw debug ctl
- D. fw ctl zdebug
Answer: D
NEW QUESTION 62
Check Point's PostgreSQL is partitioned into several relational database domains. Which domain contains network objects and security policies?
- A. System Domain
- B. Global Domain
- C. User Domain
- D. Log Domain
Answer: B
NEW QUESTION 63
You are running R80.XX on an open server and you see a high CPU utilization on your 12 CPU cores You now want to enable Hyperthreading to get more cores to gain some performance. What is the correct way to achieve this?
- A. just turn on HAT in the bios of the server and boot it
- B. in dish run set HAT on
- C. just turn on HAT in the bios of the server and after it has booted enable it in cpconfig
- D. Hyperthreading is not supported on open servers, on on Check Point Appliances
Answer: B
NEW QUESTION 64
You have configured IPS Bypass Under Load function with additional kernel parameters ids_tolerance_no_stress=15 and ids_tolerance_stress-15 For configuration you used the *fw ctl set' command After reboot you noticed that these parameters returned to their default values What do you need to do to make this configuration work immediately and stay permanent?
- A. Edit appropriate parameters in $FWDIR/boot/modules/fwkern.conf
- B. Set these parameters again with "fw ctl set" and edit appropriate parameters in $FWDIR/boot/modules/ fwkern.conf
- C. Set these parameters again with "fw ctl set" and save configuration with "save config"
- D. Use script $FWDIR/bin IpsSetBypass.sh to set these parameters
Answer: B
Explanation:
Explanation
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=
NEW QUESTION 65
Troubleshooting issues with Mobile Access requires the following:
- A. Standard VPN debugs and packet captures on Security Gateway, debugs of "cvpnd' process on Security Management
- B. Debug logs of FWD captured with the command - 'fw debug fwd on
TDERROR_MOBILE_ACCESS=5' - C. 'ma_vpnd' process on Secunty Gateway
- D. Standard VPN debugs, packet captures, and debugs of cvpnd' process on Security Gateway
Answer: D
NEW QUESTION 66
......
Online Questions - Outstanding Practice To your 156-585 Exam: https://www.trainingdump.com/CheckPoint/156-585-practice-exam-dumps.html
Practice To 156-585 - TrainingDump Remarkable Practice On your Check Point Certified Troubleshooting Expert Exam: https://drive.google.com/open?id=18-tt1VA6uKFtQFalox9I-hh0u9JBkw0f