CheckPoint 156-585 Exam Questions Instant Access

Question 1

What table does the command "fwaccel conns" pull information from?

Afwxl_conns

BSecureXLCon

Ccphwd_db

Dsxl_connections

Answer : A

Question 2

What does SIM handle?

AAccelerating packets

BFW kernel to SXL kernel hand off

COPSEC connects to SecureXL

DHardware communication to the accelerator

Answer : D

Question 3

Where do Protocol parsers register themselves for IPS?

APassive Streaming Library

BOther handlers register to Protocol parser

CProtections database

DContext Management Infrastructure

Answer : A

Question 4

You have configured IPS Bypass Under Load function with additional kernel parameters ids_tolerance_no_stress=15 and ids_tolerance_stress-15 For configuration you used the *fw ctl set' command After reboot you noticed that these parameters returned to their default values What do you need to do to make this configuration work immediately and stay permanent?

ASet these parameters again with ''fw ctl set'' and edit appropriate parameters in $FWDIR/boot/modules/ fwkern.conf

BUse script $FWDIR/bin IpsSetBypass.sh to set these parameters

CSet these parameters again with ''fw ctl set'' and save configuration with ''save config''

DEdit appropriate parameters in $FWDIR/boot/modules/fwkern.conf
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk62848&partition=Advanced&product=IPS

Answer : A

Question 5

Which of the following is a component of the Context Management Infrastructure used to collect signatures in user space from multiple sources, such as Application Control and IPS. and compiles them together into unified Pattern Matchers?

ACMI Loader

Bcpas

CPSL - Passive Signature Loader

DContext Loader

Answer : A

Question 6

The Check Pom! Firewall Kernel is the core component of the Gaia operating system and an integral part of the traffic inspection process There are two procedures available for debugging the firewall kernel Which procedure/command is used for troubleshooting packet drops and other kernel activites while using minimal resources (1 MB buffer)?

Afw ctl zdebug

Bfw ctl debug/kdebug

Cfwk ctl debug

Dfw debug ctl

Answer : A

Question 7

If you run the command "fw monitor -e accept src=10.1.1.201 or src=172.21.101.10 or src=192.0.2.10;" from the cli sh What will be captured?

APackets from 10 1 1 201 going to 192.0 2.10

BPackets destined to 172 21 101 10 from 10.1.1.101

COnly packet going to 192.0.2.10

Dfw monitor only works in expert mode so no packets will be captured

Answer : C

CheckPoint Check Point Certified Troubleshooting Expert 156-585 Exam Questions