CheckPoint CCSM 156-115.77 Questions & Answers

• Question 281:

  True or False: Software blades perform their inspection primarily through the kernel chain modules.

  A. False. Software blades do not pass through the chain modules.

  B. True. Many software blades have their own dedicated kernel chain module for inspection.

  C. True. All software blades are inspected by the IP Options chain module.

  D. True. Most software blades are inspected by the TCP streaming or Passive Streaming chain module.

  Correct Answer: B

• Question 282:

  When using the command fw monitor, what command ensures the capture is accurate?

  A. export TDERROR_ALL_ALL=5

  B. fwaccel off

  C. fwaccel on

  D. fw accel off

  Correct Answer: B

• Question 283:

  You are troubleshooting a Security Gateway, attempting to determine which chain is causing a problem. What command would you use to show all the chains through which traffic passed?

  A. [Expert@HostName]# fw ctl chain

  B. [Expert@HostName]# fw monitor -e "accept;" -p all

  C. [Expert@HostName]# fw ctl debug m

  D. [Expert@HostName]# fw ctl zdebug all

  Correct Answer: B

• Question 284:

  For URL Filtering in the Cloud in R75 and above, what table is used to contain the URL Filtering cache values?

  A. urlf_blade_on_gw

  B. urlf_cache_tbl

  C. urlf_cache_table

  D. url_scheme_tab

  Correct Answer: C

• Question 285:

  What command would give you a summary of all the tables available to the firewall kernel?

  A. fw tab

  B. fw tab -s

  C. fw tab -h

  D. fw tab -o

  Correct Answer: B

• Question 286:

  What flag option(s) must be used to dump the complete table in friendly format, assuming there are more than one hundred connections in the table?

  A. fw tab -t connections -f

  B. fw tab -t connect -f -u

  C. fw tab -t connections -s

  D. fw tab -t connections -f u

  Correct Answer: B

• Question 287:

  Which directory below contains the URL Filtering engine update info? Here you can also go to see the status of the URL Filtering and Application Control updates.

  A. $FWDIR/urlf/update

  B. $FWDIR/appi/update

  C. $FWDIR/appi/urlf

  D. $FWDIR/update/appi

  Correct Answer: B

• Question 288:

  The command fw ctl kdebug is used to:

  A. list enabled debug parameters.

  B. read the kernel debug buffer to obtain debug messages.

  C. enable kernel debugging.

  D. select specific kernel modules for debugging.

  Correct Answer: B

• Question 289:

  Compare these two images to establish which blade/feature was disabled on the firewall.

  

  A. IPS

  B. VPN

  C. NAT

  D. L2TP

  Correct Answer: B

• Question 290:

  Which of the following BEST describes the command fw ctl chain function?

  A. View how CoreXL is distributing traffic among the firewall kernel instances.

  B. View established connections in the connections table.

  C. View the inbound and outbound kernel modules and the order in which they are applied.

  D. Determine if VPN Security Associations are being established.

  Correct Answer: C