CheckPoint 156-586 Exam Practice Test Instant Access

Question 1

What is the simplest and most efficient way to check all dropped packets in real time?

Atail -f $FWDIR/log/fw.log |grep drop in expert mode

Bcat /dev/fw1/log in expert mode

Cfw ctl zdebug + drop in expert mode

DSmartlog

Answer : C

Question 2

For Identity Awareness, what is the PDP process?

AIdentity server

BLog Sifter

CCaptive Portal Service

DUserAuth Database

Answer : A

Question 3

What is the kernel process for Content Awareness that collects the data from the contexts received from the CMI and decides if the file is matched by a data type?

Acntawmod

Bdlpda

Cdlpu

Dcntmgr

Answer : A

Question 4

How can you start debug of the Unified Policy with all possible flags turned on?

Afw ctl debug -m UP all

Bfw ctl debug -m UP

Cfw ctl debug -m fw + UP

Dfw ctl debuq -m UnifiedPolicv all

Answer : A

Question 5

The management configuration stored in the Postgres database is partitioned into several relational database domains. What is the purpose of the Global Domain?

AGlobal Domains is used by the IPS software blade to map the IDs to the corresponding countries according to the IpToCountry.csv file.

BThis domain is used as the global database to back up the objects referencing the corresponding object attributes from the System Domain.

CThis domain is used as the global database to track the changes made by multiple administrators on the same objects prior to publishing.

DThis domain is used as the global database for MDSM and contains global objects and policies.

Answer : B

Question 6

Your users are having trouble opening a Web page and you need to troubleshoot it. You open the Smart Console, and you get the following message when you navigate to the Logs and Monitor "SmartLog is not active or Failed to parse results from server". What is the first thing you can try to resolve it?

ARun the commands on the SMS: smartlogstart and smartlogstop

Bsmartlog debug on and smartlog debug off

Csmartlog_server restart

Dcpmstop and cpmstart

Answer : C

Question 7

If the cpsemd process of SmartEvent has crashed or is having trouble coming up, then it usually indicates that __________.

AThe SmartEvent core on the Solr indexer has been deleted

BThe loqqed in administrator does not have permissions to run SmartEvent

CPostgres database is down

DCpd daemon is unable to connect to the log server

Answer : C

CheckPoint 156-586 Check Point Certified Troubleshooting Expert - R81 Exam Practice Test