CheckPoint CCTE 156-585 Questions & Answers

• Question 31:

  Which Threat Prevention daemon is the core Threat Emulator, engine and responsible for emulation files and communications with Threat Cloud?

  A. ctasd

  B. inmsd

  C. ted

  D. scrub

  Correct Answer: C

  https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk97638

• Question 32:

  When a User process or program suddenly crashes, a core dump is often used to examine the problem. Which command is used to enable the core-dumping via GAIA dish?

  A. set core-dump enable

  B. set core-dump per_process

  C. set user-dump enable

  D. set core-dump total

  Correct Answer: A

• Question 33:

  If IPS protections that prevent SecureXL from accelerating traffic, such as Network Quota, Fingerprint Scrambling. TTL Masking etc, have to be used, what is a recommended practice to enhance the performance of the gateway?

  A. Use the IPS exception mechanism

  B. Disable all such protections

  C. Disable SecureXL and use CoreXL

  D. Upgrade the hardware to include more Cores and Memory

  Correct Answer: A

  For protections that prevent SecureXL from accelerating traffic , use the IPS exception mechanism. This mechanism allows SecureXL to accelerate connections that match exception rules. For example, the Network Quota protection does not disable SecureXL templates on connections that match the protection's exception rules.

• Question 34:

  How many captures does the command "fw monitor -p all" take?

  A. All 15 of the inbound and outbound modules

  B. All 4 points of the fw VM modules

  C. 1 from every inbound and outbound module of the chain

  D. The -p option takes the same number of captures, but gathers all of the data packet

  Correct Answer: C

• Question 35:

  What are the maximum kernel debug buffer sizes, depending on the version

  A. 8MB or 32MB

  B. 8GB or 64GB

  C. 4MB or 8MB

  D. 32MB or 64MB

  Correct Answer: A

• Question 36:

  Which command(s) will turn off all vpn debug collection?

  A. vpn debug off

  B. vpn debug -a off

  C. vpn debug off and vpn debug ikeoff

  D. fw ctl debug 0

  Correct Answer: C

• Question 37:

  Which daemon governs the Mobile Access VPN blade and works with VPND to create Mobile Access VPN connections? It also handles interactions between HTTPS and the Multi-Portal Daemon.

  A. Connectra VPN Daemon - cvpnd

  B. Mobile Access Daemon - MAD

  C. mvpnd

  D. SSL VPN Daemon - sslvpnd

  Correct Answer: A

• Question 38:

  What are four main database domains?

  A. System, Global, Log, Event

  B. System, User, Host, Network

  C. Local, Global, User, VPN

  D. System, User, Global, Log

  Correct Answer: D

• Question 39:

  You need to run a kernel debug over a longer period of time as the problem occurs only once or twice a week. Therefore, you need to add a timestamp to the kernel debug and write the output to a file but you can't afford to fill up all the remaining disk space and you only have 10 GB free for saving the debugs. What is the correct syntax for this?

  A. fw ctl kdebug -T -f -m 10 -s 1000000 -o debugfilename

  B. fw ctl kdebug -T -f -m 10 -s 1000000 > debugfilename

  C. fw ctl kdebug -T -m 10 -s 1000000 -o debugfilename

  D. fw ctl debug -T -f -m 10 -s 1000000 -o debugfilename

  Correct Answer: A

  https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_NextGenSecurityGateway_Guide/Topics-FWG/Kernel-Debug/Kernel-Debug-Syntax.htm?tocpath=Kernel%20Debug%20on%20Security%20Gateway%7C_____1

• Question 40:

  Which of the following is NOT a valid "fwaccel" parameter?

  A. stat

  B. stats

  C. templates

  D. packets

  Correct Answer: D

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk41397