CheckPoint 156-585 Exam Questions Instant Access

Question 1

After kernel debug with "fw ctl debug" you received a huge amount of information It was saved in a very large file that is difficult to open and analyze with standard text editors Suggest a solution to solve this issue.

AUse 'fw ctl zdebug' because of 1024KB buffer size

BDivide debug information into smaller files Use 'fw ctl kdebug -f -o 'filename' -m 25 - s '1024'

CReduce debug buffer to 1024KB and run debug for several times

DUse Check Point InfoView utility to analyze debug output

Answer : C

Question 2

The management configuration stored in the Postgres database is partitioned into several relational database Domains, like - System, User, Global and Log Domains. The User Domain stores the network objects and security policies. Which of the following is stored in the Log Domain?

AConfiguration data of Log Servers and saved queries for applications

BActive Logs received from Security Gateways and Management Servers

CActive and past logs received from Gateways and Servers

DLog Domain is not stored in Postgres database, it is part of Solr indexer only

Answer : D

Question 3

Which situation triggers an IPS bypass under load on a 24-core Check Point appliance?

Aany of the CPU cores is above the threshold for more than 10 seconds

Ball CPU core most be above the threshold for more than 10 seconds

Ca single CPU core must be above the threshold for more than 10 seconds, but is must be the same core during this time

Dthe average cpu utilization over all cores must be above the threshold for 1 second

Answer : A

Question 4

Which command can be run in Expert mode lo verify the core dump settings?

Agrep cdm /config/db/coredump

Bgrep cdm /config/db/initial

Cgrep SFWDlR/config/db/initial

Dcat /etc/sysconfig/coredump/cdm conf

Answer : C

Question 5

Which command is most useful for debugging the fwaccel module?

Afw zdebug

Bsecurexl debug

Cfwaccel dbg

Dfw debug

Answer : C

Question 6

Which of the following inputs is suitable for debugging HTTPS inspection issues?

Avpn debug cptls on

Bfw ctl debug --m fw + conn drop cptls

Cfw diag debug tls enable

Dfw debug tls on TDERROR_ALL_ALL=5

Answer : B

Question 7

What are the main components of Check Point's Security Management architecture?

AManagement server, management database, log server, automation server

BManagement server, Security Gateway. Multi-Domain Server, SmartEvent Server

CManagement Server. Log Server. LDAP Server, Web Server

DManagement server Log server, Gateway server. Security server

Answer : A

CheckPoint Check Point Certified Troubleshooting Expert 156-585 Exam Questions