Update 156-585 Samples For Check Point Certified Troubleshooting Expert Certification

NEW QUESTION 1
What acceleration mode utlizes multi-core processing to assist with traffic processing?

• A. CoreXL
• B. SecureXL
• C. HyperThreading
• D. Traffic Warping

Answer: C

NEW QUESTION 2
Which daemon governs the Mobile Access VPN blade and works with VPND to create Mobile Access VPN connections? It also handles interactions between HTTPS and the Multi-Portal Daemon.

• A. Connectra VPN Daemon - cvpnd
• B. Mobile Access Daemon - MAD
• C. mvpnd
• D. SSL VPN Daemon - sslvpnd

Answer: A

NEW QUESTION 3
The customer is using Check Point appliances that were configured long ago by third-party administrators. Current policy includes different enabled IPS protections and Bypass Under Load function. Bypass Under Load is configured to disable IPS inspections of CPU and Memory usage is higher than 80%. The Customer reports that IPS protections are not working at all regardless of CPU and Memory usage.
What is the possible reason of such behavior?

• A. The kernel parameter ids_assume_stress is set to 0
• B. The kernel parameter ids_assume_stress is set to 1
• C. The kernel parameter ids_tolerance_no_stress is set to 10
• D. The kernel parameter ids_tolerance_stress is set to 10

Answer: D

NEW QUESTION 4
An administrator receives reports about issues with log indexing and text searching regarding an existing Management Server. In trying to find a solution she wants to check if the process responsible for this feature is running correctly. What is true about the related process?

• A. fwm manages this database after initialization of the ICA
• B. cpd needs to be restarted manual to show in the list
• C. fwssd crashes can affect therefore not show in the list
• D. solr is a child process of cpm

Answer: D

NEW QUESTION 5
You are running R80.XX on an open server and you see a high CPU utilization on your 12 CPU cores You now want to enable Hyperthreading to get more cores to gain some performance. What is the correct way to achieve this?

• A. Hyperthreading is not supported on open servers, on on Check Point Appliances
• B. just turn on HAT in the bios of the server and boot it
• C. just turn on HAT in the bios of the server and after it has booted enable it in cpconfig
• D. in dish run set HAT on

Answer: A

NEW QUESTION 6
Rules within the Threat Prevention policy use the Malware database and network objects. Which directory is used for the Malware database?

• A. $FWDIR/conf/install_manager_tmp/ANTIMALWARE/conf/
• B. $CPDIR/conf/install_manager_lmp/ANTIMALWARE/conf/
• C. $FWDlR/conf/install_firewall_imp/ANTIMALWARE/conf/
• D. $FWDlR/log/install_manager_tmp/ANTIMALWARBlog?

Answer: A

NEW QUESTION 7
What command is usually used for general firewall kernel debugging and what is the size of the buffer that is automatically enabled when using the command?

• A. fw ctl debug, buffer size is 1024 KB
• B. fw ell zdebu
• C. buffer size is 32768 KB
• D. fw dl zdebug, buffer size is 1 MB
• E. fw ctl kdeou
• F. buffer size is 32000 KB

Answer: D

NEW QUESTION 8
You need to run a kernel debug over a longer period of time as the problem occurs only once or twice a week. Therefore, you need to add a timestamp to the kernel debug and write the output to a file but you can’t afford to fill up all the remaining disk space and you only have 10 GB free for saving the debugs. What is the correct syntax for this?

• A. fw ctl kdebug -T -f -m 10 -s 1000000 -o debugfilename
• B. fw ctl kdebug -T -f -m 10 -s 1000000 > debugfilename
• C. fw ctl kdebug -T -m 10 -s 1000000 -o debugfilename
• D. fw ctl debug -T -f -m 10 -s 1000000 -o debugfilename

Answer: D

NEW QUESTION 9
What is the correct syntax to turn a VPN debug on and create new empty debug files?

• A. vpn debug truncon
• B. vpndebug trunc on
• C. vpn kdebug on
• D. vpn debug trunkon

Answer: D

NEW QUESTION 10
During firewall kernel debug with fw ctl zdebug you received less information than expected. You noticed that a lot of messages were lost since the time the debug was started. What should you do to resolve this issue?

• A. Increase debug buffer; Use fw ctl debug –buf 32768
• B. Redirect debug output to file; Use fw ctl zdebug –o ./debug.elg
• C. Increase debug buffer; Use fw ctl zdebug –buf 32768
• D. Redirect debug output to file; Use fw ctl debug –o ./debug.elg

Answer: A

NEW QUESTION 11
How many tiers of pattern matching can a packet pass through during IPS inspection?

• A. 2
• B. 1
• C. 5
• D. 9

Answer: A

NEW QUESTION 12
How can you increase the ring buffer size to 1024 descriptors?

• A. set interface eth0 rx-ringsize 1024
• B. fw ctl int rx_ringsize 1024
• C. echo rx_ringsize=1024>>/etc/sysconfig/sysctl.conf
• D. dbedit>modify properties firewall_properties rx_ringsize 1024

Answer: A

NEW QUESTION 13
What is the simplest and most efficient way to check all dropped packets in real time?

• A. fw ctl zdebug * drop in expert mode
• B. Smartlog
• C. cat /dev/fwTlog in expert mode
• D. tail -f SFWDIR/log/fw log |grep drop in expert mode

Answer: D

NEW QUESTION 14
What components make up the Context Management Infrastructure?

• A. CMI Loader and Pattern Matcher
• B. CPMI and FW Loader
• C. CPX and FWM
• D. CPM and SOLR

Answer: A

NEW QUESTION 15
What are four main database domains?

• A. System, Global, Log, Event
• B. System, User, Host, Network
• C. Local, Global, User, VPN
• D. System, User, Global, Log

Answer: D

NEW QUESTION 16
What are the maximum kernel debug buffer sizes, depending on the version

• A. 8MB or 32MB
• B. 8GB or 64GB
• C. 4MB or 8MB
• D. 32MB or 64MB

Answer: A

NEW QUESTION 17
......