CheckPoint 156-585 Online Practice Questions and Exam Preparation

CheckPoint 156-585 Online Questions & Answers

• Question 61:

  What are the maximum kernel debug buffer sizes, depending on the version

  A. 8MB or 32MB
  B. 8GB or 64GB
  C. 4MB or 8MB
  D. 32MB or 64MB
  A. 8MB or 32MB

• Question 62:

  Some users from your organization have been reporting some connection problems with CIFS since this morning

  You suspect an IPS issue after an automatic IPS update last night. So you want to perform a packet capture on uppercase I only directly after the IPS chain module (position 4 in the chain) to check If the packets pass the IPS. What command do you need to run?

  A. fw monitor -ml -pi 5 -e
  B. fw monitor -pi 5 -e
  C. tcpdump -eni any
  D. fw monitor -pi asm
  C. tcpdump -eni any

  ---

  Explanation/Reference:

• Question 63:

  What is the benefit of running "vpn debug trunc over "vpn debug on"?

  A. "vpn debug trunc" purges ike.elg and vpnd elg and creates limestarnp while starting ike debug and vpn debug
  B. "vpn debug trunc* truncates the capture hence the output contains minimal capture
  C. "vpn debug trunc* provides verbose capture
  D. No advantage one over the other
  A. "vpn debug trunc" purges ike.elg and vpnd elg and creates limestarnp while starting ike debug and vpn debug

• Question 64:

  Troubleshooting issues with Mobile Access requires the following:

  A. Standard VPN debugs, packet captures, and debugs of cvpnd' process on Security Gateway
  B. Standard VPN debugs and packet captures on Security Gateway, debugs of "cvpnd' process on Security Management
  C. 'ma_vpnd' process on Secunty Gateway
  D. Debug logs of FWD captured with the command - 'fw debug fwd on TDERROR_MOBILE_ACCESS=5'
  A. Standard VPN debugs, packet captures, and debugs of cvpnd' process on Security Gateway

• Question 65:

  If IPS protections that prevent SecureXL from accelerating traffic, such as Network Quota, Fingerprint Scrambling. TTL Masking etc, have to be used, what is a recommended practice to enhance the performance of the gateway?

  A. Use the IPS exception mechanism
  B. Disable all such protections
  C. Disable SecureXL and use CoreXL
  D. Upgrade the hardware to include more Cores and Memory
  A. Use the IPS exception mechanism

  ---

  Explanation/Reference:

  For protections that prevent SecureXL from accelerating traffic , use the IPS exception mechanism. This mechanism allows SecureXL to accelerate connections that match exception rules. For example, the Network Quota protection does not disable SecureXL templates on connections that match the protection's exception rules.

• Question 66:

  Which of the following is a component of the Context Management Infrastructure used to collect signatures in user space from multiple sources, such as Application Control and IPS. and compiles them together into unified Pattern Matchers?

  A. CMI Loader
  B. cpas
  C. PSL - Passive Signature Loader
  D. Context Loader
  A. CMI Loader

• Question 67:

  Jenna has to create a VPN tunnel to a CISCO ASA but has to set special property to renegotiate the Phase 2 tunnel after 10 MB of transferee1 data. This can not be configured in the smartconsole, so how can she modify this property?

  A. using GUIDBEDIT located in same directory as Smartconsole on the Windows client
  B. she need to install GUIDBEDIT which can be downloaded from the Usercenter
  C. she need to run GUIDBEDIT from CLISH which opens a graphical window on the smartcenter
  D. this cant be done anymore as GUIDBEDIT is not supported in R80 anymore
  C. she need to run GUIDBEDIT from CLISH which opens a graphical window on the smartcenter

• Question 68:

  What command is usually used for general firewall kernel debugging and what is the size of the buffer that is automatically enabled when using the command?

  A. fw ctl debug, buffer size is 1024 KB
  B. fw ell zdebug. buffer size is 32768 KB
  C. fw dl zdebug, buffer size is 1 MB
  D. fw ctl kdeoug. buffer size is 32000 KB
  D. fw ctl kdeoug. buffer size is 32000 KB

• Question 69:

  What are the main components of Check Point's Security Management architecture?

  A. Management server, management database, log server, automation server
  B. Management server, Security Gateway. Multi-Domain Server, SmartEvent Server
  C. Management Server. Log Server. LDAP Server, Web Server
  D. Management server Log server, Gateway server. Security server
  A. Management server, management database, log server, automation server

• Question 70:

  The Check Pom! Firewall Kernel is the core component of the Gaia operating system and an integral part of the traffic inspection process There are two procedures available for debugging the firewall kernel

  Which procedure/command is used for troubleshooting packet drops and other kernel activites while using minimal resources (1 MB buffer)?

  A. fw ctl zdebug
  B. fw ctl debug/kdebug
  C. fwk ctl debug
  D. fw debug ctl
  A. fw ctl zdebug

  ---

  Explanation/Reference: