CheckPoint 156-585 Online Practice Questions and Exam Preparation

CheckPoint 156-585 Online Questions & Answers

• Question 21:

  RAD is initiated when Application Control and URL Filtering blades are active on the Security Gateway What is the purpose of the following RAD configuration file SFWDIR/conf/rad_settings.C?

  A. This file contains the location information tor Application Control and/or URL Filtering entitlements
  B. This file contains the information on how the Security Gateway reaches the Security Managers RAD service for Application Control and URL Filtering
  C. This file contains RAD proxy settings
  D. This file contains all the host name settings for the online application detection engine
  B. This file contains the information on how the Security Gateway reaches the Security Managers RAD service for Application Control and URL Filtering

  ---

  Explanation/Reference:

• Question 22:

  Your users have some issues connecting Mobile Access VPN to the gateway. How can you debug the tunnel establishment?

  A. in the file $CVPNDIR/conf/httpd.conf change the line loglevel .. To LogLevel debug and run cvpnrestart
  B. run vpn debug truncon
  C. run fw ctl zdebug -m sslvpn all
  D. in the file $VPNDIR/conf/httpd.conf the line Loglevel .. To LogLevel debug and run vpn restart
  A. in the file $CVPNDIR/conf/httpd.conf change the line loglevel .. To LogLevel debug and run cvpnrestart

• Question 23:

  What is the difference in debugging a S2S or C2S (using Check Point VPN Client) VPN?

  A. there is no difference
  B. the C2S VPN uses a different VPN deamon and there a second VPN debug
  C. the C2S VPN can not be debugged as it uses different protocols for the key exchange
  D. the C2S client uses Browser based SSL vpn and cant be debugged
  A. there is no difference

  ---

  Explanation/Reference:

  It says that C2S is with Checkpoint VPN Client installed, so is a Remote Access VPN... Since Remote Access uses the same daemons as a S2S VPN, it won't be any difference on the debug at the Gateway side... At the client side you need to check logs on vpn client... Regarding answer D, it refers to an SSL browse based VPN that DON'T require client

• Question 24:

  Which of the following is NOT a valid "fwaccel" parameter?

  A. stat
  B. stats
  C. templates
  D. packets
  D. packets

  ---

  Explanation/Reference:

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk41397

• Question 25:

  What acceleration mode utlizes multi-core processing to assist with traffic processing?

  A. CoreXL
  B. SecureXL
  C. HyperThreading
  D. Traffic Warping
  C. HyperThreading

• Question 26:

  Check Point Access Control Daemons contains several daemons for Software Blades and features. Which Daemon is used for Application and Control Filtering?

  A. rad
  B. cprad
  C. pepd
  D. pdpd
  A. rad

• Question 27:

  Which daemon governs the Mobile Access VPN blade and works with VPND to create Mobile Access VPN connections? It also handles interactions between HTTPS and the Multi-Portal Daemon.

  A. Connectra VPN Daemon - cvpnd
  B. Mobile Access Daemon - MAD
  C. mvpnd
  D. SSL VPN Daemon - sslvpnd
  A. Connectra VPN Daemon - cvpnd

• Question 28:

  When debugging is enabled on firewall kernel module using the `fw ctl debug' command with required options, many debug messages are provided by the kernel that help the administrator to identify issues. Which of the following is true about these debug messages generated by the kernel module?

  A. Messages are written to a buffer and collected using `fw ctl kdebug'
  B. Messages are written to console and also /var/log/messages file
  C. Messages are written to /etc/dmesg file
  D. Messages are written to $FWDIR/log/fw.elg
  B. Messages are written to console and also /var/log/messages file

• Question 29:

  Which kernel process is used by Content Awareness to collect the data from contexts?

  A. dlpda
  B. PDP
  C. cpemd
  D. CMI
  A. dlpda

  ---

  Explanation/Reference:

  Content Awareness process dlpda collects the data from those contexts and decides if the file is matched by some Data Type.

  https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk119715

• Question 30:

  Vanessa is reviewing ike.elg file to troubleshoot failed site-to-site VPN connection After sending Mam Mode Packet 5 the response from the peer is PAYLOAD-MALFORMED" What is the reason for failed VPN connection?

  A. The authentication on Phase 1 is causing the problem.Pre-shared key on local gateway encrypted by the hash algorithm created in Packet 3 and Packet 4 doesn't match with the hash on the peer gateway generated by encrypting its preshared key
  B. The authentication on Phase 2 is causing the problem Pre-shared key on local gateway encrypted by the hash algorithm created in Packets 1 and 2 doesn't match with the hash on the peer gateway generated by encrypting its pre-shared key
  C. The authentication on Quick Mode is causing the problem Pre-shared key on local gateway encrypted by the hash algorithm created in Packets 3 and 4 doesn't match with the hash on the peer gateway generated by encrypting its preshared key
  D. The authentication on Phase 1 is causing the problem Pre-shared key on local gateway encrypted by the hash algorithm doesn't match with the hash on the peer gateway generated by encrypting its pre-shared key created in Packet 1 and Packet 2
  B. The authentication on Phase 2 is causing the problem Pre-shared key on local gateway encrypted by the hash algorithm created in Packets 1 and 2 doesn't match with the hash on the peer gateway generated by encrypting its pre-shared key

  ---

  Explanation/Reference: