Ultimate Guide to Prepare 156-585 Certification Exam for CCTE in 2021
Use Real 156-585 Dumps - CheckPoint Correct Answers updated on 2021
NEW QUESTION 24
What is connect about the Resource Advisor (RAD) service on the Security Gateways?
- A. RAD is completely loaded as a kernel module that looks up URL in cache and if not found connects online for categorization There isno user space involvement in this process
- B. RAD is not a separate module, it is an integrated function of the 'fw1 kernel module and does all operations in the kernel space
- C. RAD has a kernel module that looks up the kernel cache, notifies client about hits and misses andforwards a-sync requests to RADuser space module which is responsible for online categorization
- D. RAD functions completely in user space The Pattern Matter (PM) module ofthe CMI looks up for URLs in the cache and if not found, contact the RAD process inuser space to do online categorization
Answer: D
NEW QUESTION 25
The two procedures available for debugging in the firewall kernel are
i fw ctl zdebug
ii fw ctl debug/kdebug
Choose the correct statement explaining the differences in the two
- A. (i) is used on a Security Gateway, whereas (11) is used on a Security Management Server
- B. (i) is used to debug only issues related to dropping of traffic, however (n) can be used for any firewall issue including NATing, clustering etc.
- C. (i) is used to debug the access control policy only, however (n) can be used to debug a unified policy
- D. (i) Is used for general debugging, has a small buffer and is a quick way to set kernel debug flags to get an output via command line whereas (11) is useful when there is a need for detailed debugging and requires additional steps to set the buffer and get an output via command line
Answer: D
NEW QUESTION 26
John has renewed his NGTX License but he gets an error (contract for Anti-Bot expired). He wants to check the subscription status on the CU of the gateway, what command can he use for this?
- A. show license status
- B. cpstat antimalware -I subscription _status
- C. fwm lie print
- D. fw monitor license status
Answer: A
NEW QUESTION 27
Which one of the following is NOT considered a Solr core partition:
- A. CPM_0_Disabled
- B. CPM_0_Revisions
- C. CPM_Global_A
- D. CPM_Gtobal_R
Answer: D
NEW QUESTION 28
When a User process or program suddenly crashes, a core dump is often used to examine the problem. Which command is used to enable the core-dumping via GAIA dish?
- A. set core-dump per_process
- B. set core-dump total
- C. set user-dump enable
- D. set core-dump enable
Answer: B
NEW QUESTION 29
What is the buffer size set by the fw ctl zdebug command?
- A. 1 GB
- B. 8MB
- C. 1 MB
- D. 8GB
Answer: C
NEW QUESTION 30
Which Daemon should be debugged for HTTPS Inspection related issues?
- A. WSTLSO
- B. HTTPD
- C. FWD
- D. VPND
Answer: A
NEW QUESTION 31
What is the kernel process for Content Awareness that collects the data from the contexts received from the CMI and decides if the file is matched by a data type?
- A. dlpda
- B. cntawmod
- C. cntmgr
- D. dlpu
Answer: B
NEW QUESTION 32
When a User Mode process suddenly crashes it may create a core dump file. Which of the following information is available in the core dump and may be used to identify the root cause of the crash?
i Program Counter
ii Stack Pointer
ii. Memory management information
iv Other Processor and OS flags / information
- A. D Only iii
- B. i and n only
- C. i, ii, lii and iv
- D. iii and iv only
Answer: D
NEW QUESTION 33
Which of the following is NOT a valid "fwaccel" parameter?
- A. packets
- B. stats
- C. stat
- D. templates
Answer: A
NEW QUESTION 34
If you run the command "fw monitor -e accept src=10.1.1.201 or src=172.21.101.10 or src=192.0.2.10;" from the cli sh What will be captured?
- A. Packets destined to 172 21 101 10 from 10.1.1.101
- B. fw monitor only works in expert mode so no packets will be captured
- C. Only packet going to 192.0.2.10
- D. Packets from 10 1 1 201 going to 192.0 2.10
Answer: C
NEW QUESTION 35
VPN issues may result from misconfiguration, communication failure, or incompatible default configurations between peers Which basic command syntax needs to be used fortroubleshootingSite-to-Site VPN Issues?
- A. vpn debug truncon
- B. vpn truncon debug
- C. cp debug truncon
- D. fw debug truncon
Answer: B
NEW QUESTION 36
What are some measures you can take to prevent IPS false positives?
- A. Capture packets. Update the IPS database, and Back up custom IPS files
- B. Use Recommended IPS profile
- C. Use IPS only in Detect mode
- D. Exclude problematic services from being protected by IPS (sip, H 323, etc )
Answer: D
NEW QUESTION 37
RAD is initiated when Application Control and URL Filtering blades are active on the Security Gateway What is the purpose of the following RAD configuration file SFWDIR/conf/rad_settings.C?
- A. This file contains the location information tor Application Control and/or URL Filtering entitlements
- B. This file contains RAD proxy settings
- C. This file contains all the host name settings for the online application detection engine
- D. This file contains the information on how the Security Gateway reaches the Security Managers RAD service for Application Control and URL Filtering
Answer: D
NEW QUESTION 38
Select the technology that does the following actions
- provides reassembly via streaming for TCP
- handles packet reordering and congestion
- handles payload overlap
- provides consistent stream of data to protocol parsers
- A. Context Management
- B. Pre-Protocol Parser
- C. fwtcpstream
- D. Passive Streaming Library
Answer: D
NEW QUESTION 39
Which of the following is NOT a vpn debug command used for troubleshooting?
- A. vpn debug trunc
- B. pclient getdata sslvpn
- C. fw ctl debug -m fw + conn drop vm crypt
- D. vpn debug on TDERROR_ALL_ALL=5
Answer: B
NEW QUESTION 40
Check Point's PostgreSQL is partitioned into several relational database domains. Which domain contains network objects and security policies?
- A. System Domain
- B. Global Domain
- C. User Domain
- D. Log Domain
Answer: B
NEW QUESTION 41
The management configuration stored in the Postgres database is partitioned into several relational database Domains, like - System, User, Global and Log Domains. The User Domain stores the network objects and security policies. Which of the following is stored in the Log Domain?
- A. Active and past logs received from Gateways and Servers
- B. Active Logs received from Security Gateways and Management Servers
- C. Configuration data of Log Servers and saved queries for applications
- D. Log Domain is not stored in Postgres database, it is part of Solr indexer only
Answer: D
NEW QUESTION 42
Which command do you need to execute to insert fw monitor after TCP streaming (out) in the outbound chain using absolute position? Given the chain was 1ffffe0, choose the correct answer.
- A. fw monitor -p0 ox1ffffe0
- B. fw monitor -po -0x1ffffe0
- C. fw monitor -po 1ffffe0
- D. fw monitor -p0 -ox1ffffe0
Answer: B
Explanation:
Explanation
https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/CP_R80.40_PerformanceTuning_AdminG
NEW QUESTION 43
During firewall kernel debug with fw ctl zdebug you received less information than expected. You noticed that a lot of messages were lost since the time the debug was started. What should you do to resolve this issue?
- A. Redirect debug output to file; Use fw ctl zdebug -o ./debug.elg
- B. Redirect debug output to file; Use fw ctl debug -o ./debug.elg
- C. Increase debug buffer; Use fw ctl debug -buf 32768
- D. Increase debug buffer; Use fw ctl zdebug -buf 32768
Answer: C
NEW QUESTION 44
Which process is responsible for the generation of certificates?
- A. dbsync
- B. cpm
- C. cpca
- D. fwm
Answer: C
NEW QUESTION 45
Which command can be run in Expert mode lo verify the core dump settings?
- A. grep SFWDlR/config/db/initial
- B. cat /etc/sysconfig/coredump/cdm conf
- C. grep cdm /config/db/coredump
- D. grep cdm /config/db/initial
Answer: A
NEW QUESTION 46
What is the main SecureXL database for trackingthe acceleration status of traffic?
- A. cphwd_dev_conn_table
- B. cphwd_dev_identity_table
- C. cphwd_db
- D. cphwd_tmp1
Answer: B
NEW QUESTION 47
The Check Pom! Firewall Kernel is the core component of the Gaia operating system and an integral part of the traffic inspection process There are two procedures available for debugging the firewall kernel Which procedure/command is used for troubleshooting packet drops and other kernel activites while using minimal resources (1 MB buffer)?
- A. fwk ctl debug
- B. fw ctl debug/kdebug
- C. fw debug ctl
- D. fw ctl zdebug
Answer: D
NEW QUESTION 48
What is the function of the Core Dump Manager utility?
- A. To limit the number of core dump files per process as well as the total amount of disk space used by core files
- B. To determine which process is slowing down the system
- C. To send crash information to an external analyzer
- D. To generate a new core dump for analysis
Answer: A
NEW QUESTION 49
......
CCTE -156-585 Exam-Practice-Dumps: https://www.itpass4sure.com/156-585-practice-exam.html
156-585 Premium Files Test pdf - Free Dumps Collection: https://drive.google.com/open?id=1sddsTSI4buyZDb7qHvoas3gVYjZwhG2U
