CheckPoint CCSM 156-115.80 Questions & Answers

• Question 31:

  If you are experiencing performance issues on a gateway and you suspect it may be related to the interfaces, what command will assist in determining if packets are not being received into the gateway?

  A. netstat –rn

  B. show arp dynamic all

  C. ifconfig -a and look for RX drops

  D. ifconfig –a and look for TX drops

  Correct Answer: C

• Question 32:

  According to the CCSM manual what is the first step in generating vpn debugging information?

  A. Enter "vpn debug off" then "vpn debug on"

  B. Turn the firewall of then on again

  C. Kill all traffic over the VPN and enter "vpn tu" in Expert mode

  D. Enter "vpn debug ikeon"

  Correct Answer: A

• Question 33:

  What is a primary advantage of using the fw monitor tool?

  A. It always captures all packets hitting the physical layer

  B. It is menu-driven, making it easy to configure

  C. It has no negative impact on firewall performance

  D. It can capture packets in various positions as they move through the firewall

  Correct Answer: D

  Reference: https://dl3.checkpoint.com/paid/16/HowTo_Configure_Templates_FWMonitor.pdf? HashKey=1607631676_23e6443e7344d68ad339ffc7101f46faandxtn=.pdf

• Question 34:

  Which command shows the proxy arp configuration on the firewall?

  A. show arp

  B. fw ctl arp

  C. show proxy arp

  D. arp –s

  Correct Answer: B

  Reference: https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/ CP_R80.40_CLI_ReferenceGuide/Content/Topics-CLIG/FWG/fw-ctl-arp.htm

• Question 35:

  You have configured IPS Bypass Under Load function with additional kernel parameters: ids_tolerance_no_stress=15 and ids_tolerance_stress=15. For configuration you used the "fw ctl set" command. After reboot you noticed that these parameters returned to their default values. What do you need to do to make this configuration work immediately and stay permanent?

  A. Set these parameters again with "fw ctl set" and edit appropriate parameters in $FWDIR/boot/modules/ fwkern.conf

  B. Use script $FWDIR/bin IpsSetBypass.sh to set these parameters

  C. Set these parameters again with "fw ctl set" and save configuration with "save config"

  D. Edit appropriate parameters in $FWDIR/boot/modules/fwkern.conf

  Correct Answer: C

• Question 36:

  Your company's site to site VPN tunnel has been established, however, some or all of the traffic is being dropped. Which one of the commands below could be used in troubleshooting the issue?

  A. fw ctl debug –p fw + conn pstat xlate xltrc nat

  B. fw ctl debug –m fw + conn drop ld xlate xltrc nat

  C. fw ctl debug –m fw + drop conn ltd xlate xltrc nat

  D. fw ctl debug –f fw + conns drop xlate net

  Correct Answer: B

  Reference: https://vdocuments.site/2010-cpug-con-tobias-lachmann-check-point-troubleshooting.html slide

• Question 37:

  To display status information, such as number of connections currently being handled and the peak number of concurrent connections the instance has handled since inception for each kernel instance, which command would you use?

  A. fw ctl multip stat

  B. fw ctl affinity –t stat

  C. fw ctl affinity –s stat

  D. fw ctl multik stat

  Correct Answer: D

  Reference: https://sc1.checkpoint.com/documents/R76/ CP_R76_PerformanceTuning_WebAdmin/6731.htm

• Question 38:

  On a production Check Point Gateway that is running Check Point Acceleration features, is it possible to reset SIC without affecting the production machines?

  A. Yes, use the cp_conf command

  B. No, Reset SIC using cpconfig during a change window

  C. Yes, use the vi utility to edit CP HKLM_registry.data Registry File

  D. No, Reset SIC on the Gateway first and then in SmartConsole

  Correct Answer: A

  Reference: https://securityguy225.wordpress.com/2015/06/11/how-to-reset-sic-without-restarting-allcheckpoint-process/

• Question 39:

  Which software blade daemon is the core engine that performs the scanning/inspection for DLP?

  A. fwdlp

  B. ctldpld

  C. dlpd

  D. dlpu

  Correct Answer: A

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal? eventSubmit_doGoviewsolutiondetails=andsolutionid=sk97638

• Question 40:

  Vanessa wants to configure CoreXL on an Open server. The server has a single four core CPU with 16GB of RAM and the Performance Pack is running. Which command should Vanessa use to change assigned CPUs to interface eth1?

  A. fw ctl affinity –s

  B. fw ctl multik stat

  C. sim affinity –s

  D. sim affinity –s –i eth 1 0

  Correct Answer: D