156-585 Exam Questions

What is the purpose of the Hardware Diagnostics Tool?

What table does the command "fwaccel conns" pull information from?

Check Point Threat Prevention policies can contain multiple policy layers and each layer consists of its own Rule Base Which Threat Prevention daemon is used for Anti-virus?

What command is used to find out which port Multi-Portal has assigned to the Mobile Access Portal?

Where will the usermode core files be located?

Check Point's PostgreSQL is partitioned into several relational database domains. Which domain contains network objects and security policies?

What are the four ways to insert an FW Monitor into the firewall kernel chain?

What file extension should be used with fw monitor to allow the output file to be imported and read in Wireshark?

Which one of the following is NOT considered a Solr core partition:

Where do Protocol parsers register themselves for IPS?

Which of the following is NOT a vpn debug command used for troubleshooting?

Which command is most useful for debugging the fwaccel module?

The management configuration stored in the Postgres database is partitioned into several relational database Domains, like - System, User, Global and Log Domains. The User Domain s...

After kernel debug with "fw ctl debug" you received a huge amount of information It was saved in a very large file that is difficult to open and analyze with standard text editors...

How many captures does the command "fw monitor -p all" take?

What is NOT a benefit of the fw ctl zdebug command?

URL Filtering is an essential part of Web Security in the Gateway. For the Security Gateway to perform a URL lookup when a client makes a URL request, where is the sync-request for...

If the cpsemd process of SmartEvent has crashed or is having trouble coming up. then it usually indicates that___________.

Which command can be run in Expert mode lo verify the core dump settings?

Jenna has to create a VPN tunnel to a CISCO ASA but has to set special property to renegotiate the Phase 2 tunnel after 10 MB of transferee1 dat

Troubleshooting issues with Mobile Access requires the following:

What acceleration mode utlizes multi-core processing to assist with traffic processing?

What is the simplest and most efficient way to check all dropped packets in real time?

The Check Pom! Firewall Kernel is the core component of the Gaia operating system and an integral part of the traffic inspection process There are two procedures available for debu...

If you run the command "fw monitor -e accept src=10.1.1.201 or src=172.21.101.10 or src=192.0.2.10;" from the cli sh What will be captured?

When a User Mode process suddenly crashes it may create a core dump file. Which of the following information is available in the core dump and may be used to identify the root caus...

You have configured IPS Bypass Under Load function with additional kernel parameters ids_tolerance_no_stress=15 and ids_tolerance_stress-15 For configuration you used the *fw ctl s...

Some users from your organization have been reporting some connection problems with CIFS since this morning You suspect an IPS issue after an automatic IPS update last night. So yo...

Which file is commonly associated with troubleshooting crashes on a system such as the Security Gateway?

The two procedures available for debugging in the firewall kernel are i fw ctl zdebug ii fw ctl debug/kdebug Choose the correct statement explaining the differences in the two

What is the name of the VPN kernel process?

You are running R80.XX on an open server and you see a high CPU utilization on your 12 CPU cores You now want to enable Hyperthreading to get more cores to gain some performance. W...

What are the maximum kernel debug buffer sizes, depending on the version

Which daemon governs the Mobile Access VPN blade and works with VPND to create Mobile Access VPN connections? It also handles interactions between HTTPS and the Multi-Portal Daemon...

Your users have some issues connecting Mobile Access VPN to the gateway. How can you debug the tunnel establishment?

Which Threat Prevention Daemon is the core Threat Emulation engine and responsible for emulation files and communications with Threat Cloud?

What table does command "fwaccel conns" pull information from?

What is the proper command for allowing the system to create core files?

Which command is used to write a kernel debug to a file?

Check Point Access Control Daemons contains several daemons for Software Blades and features. Which Daemon is used for Application & Control Filtering?

What is the main SecureXL database for tracking acceleration status of traffic?

Which command(s) will turn off all vpn debug collection?

Which is the correct "fw monitor" syntax for creating a capture file for loading it into WireShark?

What components make up the Context Management Infrastructure?

For TCP connections, when a packet arrives at the Firewall Kemel out of sequence or fragmented, which layer of IPS corrects this lo allow for proper inspection?

What command is usually used for general firewall kernel debugging and what is the size of the buffer that is automatically enabled when using the command?

What does CMI stand for in relation to the Access Control Policy?

When a User process or program suddenly crashes, a core dump is often used to examine the problem. Which command is used to enable the core-dumping via GAIA dish?

PostgreSQL is a powerful, open source relational database management system Check Point offers a command for viewing the database to interact with Postgres interactive shell Which...

Which Threat Prevention daemon is the core Threat Emulator, engine and responsible for emulation files and communications with Threat Cloud?