[Oct-2021] Updated CCTE 156-585 Exam Questions BUNDLE PACK
Master The CheckPoint Content 156-585 EXAM DUMPS WITH GUARANTEED SUCCESS!
NEW QUESTION 33
Which file is commonly associated with troubleshooting crashes on a system such as the Security Gateway?
- A. tcpdump
- B. fw monitor
- C. CPMIL dump
- D. core dump
Answer: D
NEW QUESTION 34
URL Filtering is an essential part of Web Security in the Gateway. For the Security Gateway to perform a URL lookup when a client makes a URL request, where is the sync-request forwarded from if a sync-request is required''
- A. URLF Online Service
- B. URLF Kernel Client
- C. RAD Kernel Space
- D. RAD User Space
Answer: B
NEW QUESTION 35
What is NOT a benefit of the fw ctl zdebug command?
- A. Cannot be used to debug additional modules
- B. Automatically allocate a 1MB buffer
- C. Collect debug messages from the kernel
- D. Clean the buffer
Answer: A
NEW QUESTION 36
PostgreSQL is a powerful, open source relational database management system Check Point offers a command for viewing the database to interact with Postgres interactive shell Which command do you need to enter the PostgreSQL interactive shell?
- A. mysql_client cpm postgres
- B. mysql -u root
- C. psql_c!ieni postgres cpm
- D. psql_client cpm postgres
Answer: A
NEW QUESTION 37
The management configuration stored in the Postgres database is partitioned into several relational database Domains, like - System, User, Global and Log Domains. The User Domain stores the network objects and security policies. Which of the following is stored in the Log Domain?
- A. Active and past logs received from Gateways and Servers
- B. Active Logs received from Security Gateways and Management Servers
- C. Configuration data of Log Servers and saved queries for applications
- D. Log Domain is not stored in Postgres database, it is part of Solr indexer only
Answer: D
NEW QUESTION 38
Vanessa is reviewing ike.elg file to troubleshoot failed site-to-site VPN connection After sending Mam Mode Packet 5 the response from the peer is PAYLOAD-MALFORMED" What is the reason for failed VPN connection?
- A. The authentication on Quick Mode is causing the problem
Pre-shared key on local gateway encrypted by the hash algorithm created in Packets 3 and 4 doesn't match with the hash on the peer gateway generated by encrypting its pre-shared key - B. The authentication on Phase 1 is causing the problem.
Pre-shared key on local gateway encrypted by the hash algorithm created in Packet 3 and Packet 4 doesn't match with the hash on the peer gateway generated by encrypting its pre-shared key - C. The authentication on Phase 2 is causing the problem
Pre-shared key on local gateway encrypted by the hash algorithm created in Packets 1 and 2 doesn't match with the hash on the peer gateway generated by encrypting its pre-shared key - D. The authentication on Phase 1 is causing the problem
Pre-shared key on local gateway encrypted by the hash algorithm doesn't match with the hash on the peer gateway generated by encrypting its pre-shared key created in Packet 1 and Packet 2
Answer: C
NEW QUESTION 39
Which one of the following is NOT considered a Solr core partition:
- A. CPM_0_Disabled
- B. CPM_0_Revisions
- C. CPM_Global_A
- D. CPM_Gtobal_R
Answer: D
NEW QUESTION 40
What acceleration mode utlizes multi-core processing to assist with traffic processing?
- A. Traffic Warping
- B. SecureXL
- C. HyperThreading
- D. CoreXL
Answer: C
NEW QUESTION 41
What is connect about the Resource Advisor (RAD) service on the Security Gateways?
- A. RAD is completely loaded as a kernel module that looks up URL in cache and if not found connects online for categorization There isno user space involvement in this process
- B. RAD is not a separate module, it is an integrated function of the 'fw1 kernel module and does all operations in the kernel space
- C. RAD has a kernel module that looks up the kernel cache, notifies client about hits and misses andforwards a-sync requests to RADuser space module which is responsible for online categorization
- D. RAD functions completely in user space The Pattern Matter (PM) module ofthe CMI looks up for URLs in the cache and if not found, contact the RAD process inuser space to do online categorization
Answer: D
NEW QUESTION 42
the difference in debugging a S2S or C2S (using Check Point VPN Client) VPN?
- A. the C2S VPN uses a different VPN deamon and there a second VPN debug
- B. there is no difference
- C. the C2S client uses Browser based SSL vpn and cant be debugged
- D. the C2S VPN can not be debugged as it uses different protocols for the key exchange
Answer: C
NEW QUESTION 43
Troubleshooting issues with Mobile Access requires the following:
- A. Standard VPN debugs and packet captures on Security Gateway, debugs of "cvpnd' process on Security Management
- B. Debug logs of FWD captured with the command - 'fw debug fwd on
TDERROR_MOBILE_ACCESS=5' - C. 'ma_vpnd' process on Secunty Gateway
- D. Standard VPN debugs, packet captures, and debugs of cvpnd' process on Security Gateway
Answer: D
NEW QUESTION 44
What command is usually used for general firewall kernel debugging andwhatis the sizeofthe buffer that isautomaticallyenabled whenusingthe command?
- A. fw ctl debug, buffer sizeis 1024 KB
- B. fw ctl kdeoug. buffer sizeis 32000 KB
- C. fw dl zdebug, buffer size is 1 MB
- D. fw ell zdebug. buffer size is 32768 KB
Answer: B
NEW QUESTION 45
Which Daemon should be debugged for HTTPS Inspection related issues?
- A. WSTLSO
- B. HTTPD
- C. FWD
- D. VPND
Answer: A
NEW QUESTION 46
Check Point Access Control Daemons contains several daemons for Software Blades and features Which Daemon is usedfor Application & Control URL Filtering?
- A. cprad
- B. rad
- C. pepd
- D. pdpd
Answer: C
NEW QUESTION 47
You have configured IPS Bypass Under Load function with additional kernel parameters ids_tolerance_no_stress=15 and ids_tolerance_stress-15 For configuration you used the *fw ctl set' command After reboot you noticed that these parameters returned to their default values What do you need to do to make this configuration work immediately and stay permanent?
- A. Edit appropriate parameters in $FWDIR/boot/modules/fwkern.conf
- B. Set these parameters again with "fw ctl set" and edit appropriate parameters in $FWDIR/boot/modules/ fwkern.conf
- C. Set these parameters again with "fw ctl set" and save configuration with "save config"
- D. Use script $FWDIR/bin IpsSetBypass.sh to set these parameters
Answer: B
Explanation:
Explanation
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=
NEW QUESTION 48
Check Point's PostgreSQL is partitioned into several relational database domains. Which domain contains network objects and security policies?
- A. System Domain
- B. Global Domain
- C. User Domain
- D. Log Domain
Answer: B
NEW QUESTION 49
Which of the following is NOT a valid "fwaccel" parameter?
- A. packets
- B. stats
- C. stat
- D. templates
Answer: A
NEW QUESTION 50
The Check Pom! Firewall Kernel is the core component of the Gaia operating system and an integral part of the traffic inspection process There are two procedures available for debugging the firewall kernel Which procedure/command is used for troubleshooting packet drops and other kernel activites while using minimal resources (1 MB buffer)?
- A. fwk ctl debug
- B. fw ctl debug/kdebug
- C. fw debug ctl
- D. fw ctl zdebug
Answer: D
NEW QUESTION 51
How many captures does the command "fw monitor -p all" take?
- A. 1 from every inbound and outbound module of the chain
- B. All 15 of the inbound and outbound modules
- C. The -p option takes the same number of captures, but gathers all of the data packet
- D. All 4 points of the fw VM modules
Answer: B
NEW QUESTION 52
John has renewed his NGTX License but he gets an error (contract for Anti-Bot expired). He wants to check the subscription status on the CU of the gateway, what command can he use for this?
- A. show license status
- B. cpstat antimalware -I subscription _status
- C. fwm lie print
- D. fw monitor license status
Answer: A
NEW QUESTION 53
......
Pass CheckPoint 156-585 Exam – Experts Are Here To Help You: https://www.exam-killer.com/156-585-valid-questions.html
Get Latest CCTE 156-585 Practice Test For Quick Preparation: https://drive.google.com/open?id=1aCiLfGYvvEMd4rdu7tZxOnY2qV4ULVHf
