[UPDATED 2021] CheckPoint 156-585 Questions Prepare with Free Demo of PDF [Q66-Q87]

[UPDATED 2021] CheckPoint 156-585 Questions Prepare with Free Demo of PDF

NEW 2021 Certification Sample Questions 156-585 Dumps & Practice Exam

CheckPoint 156-585 Exam Syllabus Topics:

Topic	Details
Topic 1	Understand how to troubleshoot and debug Remote Access VPNs Understand how to troubleshoot and debug issues that may occur with App Control and URLF
Topic 2	Understand how troubleshoot Mobile Access VPN issues Understand key Security Management Server processes and their debugs
Topic 3	Understand how to evaluate hardware configurations for optimal performance Discuss how to enable and use core dumps
Topic 4	Become familiar with more advanced Linux system commands Understand how GuiDBedit operates
Topic 5	Recognize how to troubleshoot and debug Site-to-Site VPN-related issues Understand how to use Check Point diagnostic tools to determine the status of a network
Topic 6	Understand how to troubleshoot Anti-Bot and Antivirus Obtain a deeper knowledge of the Security Management architecture
Topic 7	Understand how IPS works and how to manage performance issues Understand how to debug HTTPS Inspection-related issues
Topic 8	Understand how the server hardware and operating system affects the performance of Security Gateways Recognize User mode prcesses and how to interpret their debugs
Topic 9	Understand how to troubleshoot and debug Content Awareness issues Understand how to troubleshoot Anti-Bot and Antivirus

 

NEW QUESTION 66
What are four main database domains?

• A. Local, Global, User, VPN
• B. System, User, Global, Log
• C. System, User, Host, Network
• D. System, Global, Log, Event

Answer: B

 

NEW QUESTION 67
What is the best way to resolve an issue caused by a frozen process?

• A. Power off the machine
• B. Restart the process
• C. Kill the process
• D. Reboot the machine

Answer: B

 

NEW QUESTION 68
Which command is used to write a kernel debug to a file?

• A. fw ctl debug -T -f > debug.txt
• B. fw ctl kdebug -T -f > debug.txt
• C. fw ctl kdebug -T -l > debug.txt
• D. fw ctl debug -S -t > debug.txt

Answer: B

 

NEW QUESTION 69
When a User process or program suddenly crashes, a core dump is often used to examine the problem. Which command is used to enable the core-dumping via GAIA dish?

• A. set core-dump enable
• B. set user-dump enable
• C. set core-dump per_process
• D. set core-dump total

Answer: A

 

NEW QUESTION 70
For TCP connections, when a packet arrives at the Firewall Kernel out of sequence or fragmented, which layer of IPS corrects this to allow for proper inspection?

• A. Protections
• B. Protocol Parsers
• C. Context Management
• D. Passive Streaming Library

Answer: D

 

NEW QUESTION 71
What is NOT a benefit of the fw ctl zdebug command?

• A. Automatically allocate a 1MB buffer
• B. Clean the buffer
• C. Collect debug messages from the kernel
• D. Cannot be used to debug additional modules

Answer: D

 

NEW QUESTION 72
Check Point Access Control Daemons contains several daemons for Software Blades and features Which Daemon is usedfor Application & Control URL Filtering?

• A. rad
• B. pdpd
• C. pepd
• D. cprad

Answer: C

 

NEW QUESTION 73
How can you start debug of the Unified Policy with all possible flags turned on?

• A. fw ctl debug -m UP all
• B. fw ctl debug -m UnifiedPolicy all
• C. fw ctl debug -m fw + UP
• D. fw ctl debug -m UP *

Answer: D

 

NEW QUESTION 74
You have configured IPS Bypass Under Load function with additional kernel parameters ids_tolerance_no_stress=15 and ids_tolerance_stress-15 For configuration you used the *fw ctl set' command After reboot you noticed that these parameters returned to their default values What do you need to do to make this configuration work immediately and stay permanent?

• A. Edit appropriate parameters in $FWDIR/boot/modules/fwkern.conf
• B. Use script $FWDIR/bin IpsSetBypass.sh to set these parameters
• C. Set these parameters again with "fw ctl set" and edit appropriate parameters in $FWDIR/boot/modules/ fwkern.conf
• D. Set these parameters again with "fw ctl set" and save configuration with "save config"

Answer: C

Explanation:
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk62848&partition=Advanced&product=IPS

 

NEW QUESTION 75
What is the correct syntax to set all debug flags for Unified Policy related issues?

• A. fw ctl debug -m UP all
• B. fw ctl debug -m fw all
• C. fw ctl debug -m up all
• D. fw ctl kdebug -m UP all

Answer: A

 

NEW QUESTION 76
What table does command "fwaccel conns" pull information from?

• A. sxl_connections
• B. SecureXLCon
• C. fwxl_conns
• D. cphwd_db

Answer: C

 

NEW QUESTION 77
Which command can be run in Expert mode lo verify the core dump settings?

• A. cat /etc/sysconfig/coredump/cdm conf
• B. grep SFWDlR/config/db/initial
• C. grep cdm /config/db/coredump
• D. grep cdm /config/db/initial

Answer: B

 

NEW QUESTION 78
Which command do you need to execute to insert fw monitor after TCP streaming (out) in the outbound chain using absolute position? Given the chain was 1ffffe0, choose the correct answer.

• A. fw monitor -p0 ox1ffffe0
• B. fw monitor -po -0x1ffffe0
• C. fw monitor -p0 -ox1ffffe0
• D. fw monitor -po 1ffffe0

Answer: B

Explanation:
https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/CP_R80.40_PerformanceTuning_AdminGuide/Content/Topics-PTG/CLI/fw-monitor.htm

 

NEW QUESTION 79
Your fwm constantly crashes and is restarted by the watchdog. You can't find any coredumps related to this process, so you need to check If coredumps are enabled at all How can you achieve that?

• A. in expert mode run show core-dump status
• B. in dish run set core-dump status
• C. in dish run show coredumb status
• D. in dish run show core-dump status

Answer: C

 

NEW QUESTION 80
PostgreSQL is a powerful, open source relational database management system Check Point offers a command for viewing the database to interact with Postgres interactive shell Which command do you need to enter the PostgreSQL interactive shell?

• A. mysql -u root
• B. mysql_client cpm postgres
• C. psql_client cpm postgres
• D. psql_c!ieni postgres cpm

Answer: B

 

NEW QUESTION 81
What is connect about the Resource Advisor (RAD) service on the Security Gateways?

• A. RAD functions completely in user space The Pattern Matter (PM) module ofthe CMI looks up for URLs in the cache and if not found, contact the RAD process inuser space to do online categorization
• B. RAD is not a separate module, it is an integrated function of the 'fw1 kernel module and does all operations in the kernel space
• C. RAD is completely loaded as a kernel module that looks up URL in cache and if not found connects online for categorization There isno user space involvement in this process
• D. RAD has a kernel module that looks up the kernel cache, notifies client about hits and misses andforwards a-sync requests to RADuser space module which is responsible for online categorization

Answer: A

 

NEW QUESTION 82
Which kernel process is used by Content Awareness to collect the data from contexts?

• A. cpemd
• B. CMI
• C. PDP
• D. dlpda

Answer: B

 

NEW QUESTION 83
Which of the following is NOT a vpn debug command used for troubleshooting?

• A. pclient getdata sslvpn
• B. vpn debug on TDERROR_ALL_ALL=5
• C. vpn debug trunc
• D. fw ctl debug -m fw + conn drop vm crypt

Answer: A

 

NEW QUESTION 84
James is using the same filter expression in fw monitor for CITRIX very often and instead of typing this all the time he wants to add it as a macro to the fw monitor definition file. What's the name and location of this file?

• A. $FWDIR/lib/fw.monitor
• B. $FWDIR/lib/fwmonltor.def
• C. $FWDIR/lib/tcpip.def
• D. $FWDIR/conf/fwmonltor.def

Answer: B

 

NEW QUESTION 85
Which of the following daemons is used for Threat Extraction?

• A. extractd
• B. tedex
• C. scrubd
• D. tex

Answer: A

 

NEW QUESTION 86
What does SIM handle?

• A. OPSEC connects to SecureXL
• B. Hardware communication to the accelerator
• C. Accelerating packets
• D. FW kernel to SXL kernel hand off

Answer: A

 

NEW QUESTION 87
......

156-585 Deluxe Study Guide with Online Test Engine: https://www.pass4sures.top/CCTE/156-585-testking-braindumps.html