CheckPoint CCTE 156-585 Questions & Answers

• Question 11:

  What command sets a specific interface as not accelerated?

  A. noaccel-s

  B. fwaccel exempt state

  C. nonaccel -s

  D. fwaccel -n

  Correct Answer: C

• Question 12:

  VPN issues may result from misconfiguration, communication failure, or incompatible default configurations between peers Which basic command syntax needs to be used for troubleshooting Site-to-Site VPN Issues?

  A. vpn debug truncon

  B. fw debug truncon

  C. cp debug truncon

  D. vpn truncon debug

  Correct Answer: A

• Question 13:

  What acceleration mode utlizes multi-core processing to assist with traffic processing?

  A. CoreXL

  B. SecureXL

  C. HyperThreading

  D. Traffic Warping

  Correct Answer: C

• Question 14:

  You are upgrading your NOC Firewall (on a Check Point Appliance) from R77 to R80 30 but you did not touch the security policy After the upgrade you can't connect to the new R80 30 SmartConsole of the upgraded Firewall anymore What is a possible reason for this?

  A. new new console port is 19009 and a access rule ts missing

  B. the license became invalig and the firewall does not start anymore

  C. the upgrade process changed the interfaces and IP adresses and you have to switch cables

  D. the IPS System on the new R80.30 Version prohibits direct Smartconsole access to a standalone firewall

  Correct Answer: D

• Question 15:

  Check Point's PostgreSQL is partitioned into several relational database domains. Which domain contains network objects and security policies?

  A. User Domain

  B. System Domain

  C. Global Domain

  D. Log Domain

  Correct Answer: C

• Question 16:

  The customer is using Check Point appliances that were configured long ago by third-party administrators. Current policy includes different enabled IPS protections and Bypass Under Load function. Bypass Under Load is configured to disable IPS inspections of CPU and Memory usage is higher than 80%. The Customer reports that IPS protections are not working at all regardless of CPU and Memory usage.

  What is the possible reason of such behavior?

  A. The kernel parameter ids_assume_stress is set to 0

  B. The kernel parameter ids_assume_stress is set to 1

  C. The kernel parameter ids_tolerance_no_stress is set to 10

  D. The kernel parameter ids_tolerance_stress is set to 10

  Correct Answer: B

  B: ids_assume_stress, 1 = IDS mechanism assumes that the Security Gateway is under stress, regardless of the actual utilization of CPU and memory. ref sk62848: How to tune the "Bypass under Load" IPS settings

• Question 17:

  What is the function of the Core Dump Manager utility?

  A. To generate a new core dump for analysis

  B. To limit the number of core dump files per process as well as the total amount of disk space used by core files

  C. To determine which process is slowing down the system

  D. To send crash information to an external analyzer

  Correct Answer: B

• Question 18:

  What is the difference in debugging a S2S or C2S (using Check Point VPN Client) VPN?

  A. there is no difference

  B. the C2S VPN uses a different VPN daemon and there a second VPN debug

  C. the C2S VPN can not be debugged as it uses different protocols for the key exchange

  D. the C2S client uses Browser based SSL vpn and can't be debugged

  Correct Answer: D

• Question 19:

  Check Point provides tools and commands to help you to identify issues about products and applications. Which Check Point command can help you to display status and statistics information for various Check Point products and applications?

  A. cpstat

  B. CPstat

  C. CPview

  D. fwstat

  Correct Answer: A

• Question 20:

  Which of the following inputs is suitable for debugging HTTPS inspection issues?

  A. vpn debug cptls on

  B. fw ctl debug 璵 fw + conn drop cptls

  C. fw diag debug tls enable

  D. fw debug tls on TDERROR_ALL_ALL=5

  Correct Answer: B

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk108202