[Nov-2021] Updated CheckPoint 156-585 Dumps – PDF & Online Engine
156-585.pdf - Questions Answers PDF Sample Questions Reliable
CheckPoint 156-585 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 6 |
|
| Topic 7 |
|
| Topic 8 |
|
| Topic 9 |
|
NEW QUESTION 57
What does SIM handle?
- A. Accelerating packets
- B. OPSEC connects to SecureXL
- C. Hardware communication to the accelerator
- D. FW kernel to SXL kernel hand off
Answer: C
NEW QUESTION 58
What are the main components of Check Point's Security Management architecture?
- A. Management Server. Log Server. LDAP Server, Web Server
- B. Management server, Security Gateway. Multi-Domain Server, SmartEvent Server
- C. Management server Log server, Gateway server. Security server
- D. Management server, management database, log server, automation server
Answer: D
NEW QUESTION 59
When debugging is enabled on firewall kernel module using the 'fw ctl debug' command with required options, many debug messages are provided by the kernel that help the administrator to identify issues. Which of the following is true about these debug messages generated by the kernel module?
- A. Messages are written to a buffer and collected using 'fw ctl kdebug'
- B. Messages are written to $FWDIR/log/fw.elg
- C. Messages are written to /etc/dmesg file
- D. Messages are written to console and also /var/log/messages file
Answer: D
NEW QUESTION 60
Which is the correct "fw monitor" syntax for creating a capture file for loading it into WireShark?
- A. fw monitor -e "accept<FILTER EXPRESSION>;" -o Output.cap
- B. This cannot be accomplished as it is not supported with R80.10
- C. fw monitor -e "accept<FILTER EXPRESSION>;" >> Output.cap
- D. fw monitor -e "accept<FILTER EXPRESSION>;" -file Output.cap
Answer: A
NEW QUESTION 61
Which of the following is a component of the Context Management Infrastructure used to collect signatures in user space from multiple sources, such as Application Control and IPS. and compiles them together into unified Pattern Matchers?
- A. cpas
- B. Context Loader
- C. CMI Loader
- D. PSL - Passive Signature Loader
Answer: C
NEW QUESTION 62
You are trying to establish a VPN tunnel between two Security Gateways but fail. What initial steps will you make to troubleshoot the issue
- A. capture traffic on both tunnel members and collect kernel debug for fw module with vm, crypt, conn and drop flags, then collect debug of IKE and VPND daemon
- B. capture traffic on both tunnel members and collect kernel debug for fw module with vm, crypt, conn and drop flags
- C. collect debug of IKE and VPND daemon and collect kernel debug for fw module with vm, crypt, conn and drop flags
- D. capture traffic on both tunnel members and collect debug of IKE and VPND daemon
Answer: D
NEW QUESTION 63
Troubleshooting issues with Mobile Access requires the following:
- A. Standard VPN debugs and packet captures on Security Gateway, debugs of "cvpnd' process on Security Management
- B. Debug logs of FWD captured with the command - 'fw debug fwd on TDERROR_MOBILE_ACCESS=5'
- C. Standard VPN debugs, packet captures, and debugs of cvpnd' process on Security Gateway
- D. 'ma_vpnd' process on Secunty Gateway
Answer: C
NEW QUESTION 64
What acceleration mode utilizes multi-core processing to assist with traffic processing?
- A. CoreXL
- B. Traffic Warping
- C. SecureXL
- D. HyperThreading
Answer: D
NEW QUESTION 65
For TCP connections, when a packet arrives at the Firewall Kernel out of sequence or fragmented, which layer of IPS corrects this to allow for proper inspection?
- A. Protections
- B. Protocol Parsers
- C. Context Management
- D. Passive Streaming Library
Answer: D
NEW QUESTION 66
VPN issues may result from misconfiguration, communication failure, or incompatible default configurations between peers Which basic command syntax needs to be used for troubleshooting Site-to-Site VPN Issues?
- A. vpn truncon debug
- B. fw debug truncon
- C. vpn debug truncon
- D. cp debug truncon
Answer: C
NEW QUESTION 67
When a User process or program suddenly crashes, a core dump is often used to examine the problem. Which command is used to enable the core-dumping via GAIA dish?
- A. set core-dump enable
- B. set user-dump enable
- C. set core-dump per_process
- D. set core-dump total
Answer: A
NEW QUESTION 68
How can you increase the ring buffer size to 1024 descriptors?
- A. fw ctl int rx_ringsize 1024
- B. echo rx_ringsize=1024>>/etc/sysconfig/sysctl.conf
- C. set interface eth0 rx-ringsize 1024
- D. dbedit>modify properties firewall_properties rx_ringsize 1024
Answer: C
NEW QUESTION 69
What is the best way to resolve an issue caused by a frozen process?
- A. Power off the machine
- B. Restart the process
- C. Kill the process
- D. Reboot the machine
Answer: B
NEW QUESTION 70
Which of the following is contained in the System Domain of the Postgres database?
- A. User modified configurations such as network objects
- B. Trusted GUI clients
- C. Saved queries for applications
- D. Configuration data of log servers
Answer: B
NEW QUESTION 71
Select the technology that does the following actions
- provides reassembly via streaming for TCP
- handles packet reordering and congestion
- handles payload overlap
- provides consistent stream of data to protocol parsers
- A. Context Management
- B. Passive Streaming Library
- C. fwtcpstream
- D. Pre-Protocol Parser
Answer: B
NEW QUESTION 72
Which command do you need to execute to insert fw monitor after TCP streaming (out) in the outbound chain using absolute position? Given the chain was 1ffffe0, choose the correct answer.
- A. fw monitor -p0 ox1ffffe0
- B. fw monitor -po -0x1ffffe0
- C. fw monitor -p0 -ox1ffffe0
- D. fw monitor -po 1ffffe0
Answer: B
Explanation:
Explanation
https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/CP_R80.40_PerformanceTuning_AdminG
NEW QUESTION 73
What is the main SecureXL database for trackingthe acceleration status of traffic?
- A. cphwd_dev_identity_table
- B. cphwd_tmp1
- C. cphwd_db
- D. cphwd_dev_conn_table
Answer: A
NEW QUESTION 74
What is the main SecureXL database for tracking acceleration status of traffic?
- A. cphwd_tmp1
- B. cphwd_db
- C. cphwd_dev_identity_table
- D. cphwd_dev_conn_table
Answer: A
NEW QUESTION 75
Where will the usermode core files be located?
- A. SFWDlR/var'log/dump/usermode
- B. /var/log/dump/usermode
- C. SCPDIR/var/log/dump/usermode
- D. /var/suroot
Answer: B
NEW QUESTION 76
What process is responsible for sending and receiving logs in the management server?
- A. CPD
- B. FWD
- C. FWM
- D. CPM
Answer: B
NEW QUESTION 77
Which situation triggers an IPS bypass under load on a 24-core Check Point appliance?
- A. a single CPU core must be above the threshold for more than 10 seconds, but is must be the same core during this time
- B. all CPU core most be above the threshold for more than 10 seconds
- C. any of the CPU cores is above the threshold for more then 10 seconds
- D. the average cpu utilization over all cores must be above the threshold for 1 second
Answer: C
NEW QUESTION 78
What is the benefit of running "vpn debug trunc over "vpn debug on"?
- A. "vpn debug trunc" purges ike.elg and vpnd elg and creates limestarnp while starting ike debug and vpn debug
- B. "vpn debug trunc* provides verbose capture
- C. No advantage one over the other
- D. "vpn debug trunc*truncates the capture hence the output contains minimal capture
Answer: A
NEW QUESTION 79
Jenna has to create a VPN tunnel to a CISCO ASA but has to set special property to renegotiate the Phase 2 tunnel after 10 MB of transferee1 data.This can not be configured in the smartconsole, so how can she modify this property?
- A. she need to install GUIDBEDIT which can be downloaded from the Usercenter
- B. this cant be done anymore as GUIDBEDIT is not supported in R80 anymore
- C. she need to run GUIDBEDIT from CLISH which opens a graphical window on the smartcenter
- D. using GUIDBEDIT located in same directoryas Smartconsole on the Windows client
Answer: C
NEW QUESTION 80
You need to run a kernel debug over a longer period of time as the problem occurs only once or twice a week. Therefore, you need to add a timestamp to the kernel debug and write the output to a file but you can't afford to fill up all the remaining disk space and you only have 10 GB free for saving the debugs. What is the correct syntax for this?
- A. fw ctl kdebug -T -f -m 10 -s 1000000 > debugfilename
- B. fw ctl kdebug -T -f -m 10 -s 1000000 -o debugfilename
- C. fw ctl kdebug -T -m 10 -s 1000000 -o debugfilename
- D. fw ctl debug -T -f -m 10 -s 1000000 -o debugfilename
Answer: D
NEW QUESTION 81
......
CheckPoint 156-585 Dumps PDF Are going to be The Best Score: https://www.suretorrent.com/156-585-exam-guide-torrent.html
CCTE 156-585 Exam and Certification Test Engine: https://drive.google.com/open?id=1IY9k6Rc3HfbbwPpNZTNDHu50vIWIE1a5