CheckPoint Checkpoint Certifications 156-585 Questions & Answers

• Question 71:

  What command is usually used for general firewall kernel debugging and what is the size of the buffer that is automatically enabled when using the command?

  A. fw ctl debug, buffer size is 1024 KB

  B. fw ell zdebug. buffer size is 32768 KB

  C. fw dl zdebug, buffer size is 1 MB

  D. fw ctl kdeoug. buffer size is 32000 KB

  Correct Answer: D

• Question 72:

  You need to run a kernel debug over a longer period of time as the problem occurs only once or twice a week. Therefore you need to add a timestamp to the kernel debug and write the output to a file

  What is the correct syntax for this?

  A. fw ctl kdebug -T -f > filename.debug

  B. fw ctl kdebug -T > filename.debug

  C. fw ctl debug -T -f > filename.debug

  D. fw ctl kdebug -T -f -o filename.debug

  Correct Answer: C

• Question 73:

  In Security Management High Availability, if the primary and secondary managements, running the same version of R80.x, are in a state of `Collision', how can this be resolved?

  A. Administrator should manually synchronize the servers using SmartConsole

  B. The Collision state does not happen in R80.x as the synchronizing automatically on every publish action

  C. Reset the SIC of the secondary management server

  D. Run the command `fw send synch force' on the primary server and `fw get sync quiet' on the secondary server

  Correct Answer: A

• Question 74:

  An administrator receives reports about issues with log indexing and text searching regarding an existing Management Server. In trying to find a solution she wants to check if the process responsible for this feature is running correctly. What is true about the related process?

  A. fwm manages this database after initialization of the ICA

  B. cpd needs to be restarted manual to show in the list

  C. fwssd crashes can affect therefore not show in the list

  D. solr is a child process of cpm

  Correct Answer: D

• Question 75:

  Which process is responsible for the generation of certificates?

  A. cpm

  B. cpca

  C. dbsync D. fwm

  Correct Answer: B

• Question 76:

  You are running R80.XX on an open server and you see a high CPU utilization on your 12 CPU cores You now want to enable Hyperthreading to get more cores to gain some performance. What is the correct way to achieve this?

  A. Hyperthreading is not supported on open servers, on on Check Point Appliances

  B. just turn on HAT in the bios of the server and boot it

  C. just turn on HAT in the bios of the server and after it has booted enable it in cpconfig

  D. in dish run set HAT on

  Correct Answer: A

• Question 77:

  What is connect about the Resource Advisor (RAD) service on the Security Gateways?

  A. RAD has a kernel module that looks up the kernel cache, notifies client about hits and misses and forwards a-sync requests to RAD user space module which is responsible for online categorization

  B. RAD is completely loaded as a kernel module that looks up URL in cache and if not found connects online for categorization There is no user space involvement in this process

  C. RAD functions completely in user space The Pattern Matter (PM) module of the CMI looks up for URLs in the cache and if not found, contact the RAD process in user space to do online categorization

  D. RAD is not a separate module, it is an integrated function of the 'fw1 kernel module and does all operations in the kernel space

  Correct Answer: C

• Question 78:

  What is the kernel process for Content Awareness that collects the data from the contexts received from the CMI and decides if the file is matched by a data type?

  A. dlpda

  B. dlpu

  C. cntmgr

  D. cntawmod

  Correct Answer: D

• Question 79:

  What process is responsible for sending and receiving logs in the management server?

  A. FWD

  B. CPM

  C. FWM

  D. CPD

  Correct Answer: A

  The FWD process is responsible for sending and receiving the logs from the different Check Point entities to the security management\log server (sometimes they are on the same machine).14 de nov. de 2019

• Question 80:

  Which of the following daemons is used for Threat Extraction?

  A. scrubd

  B. extractd

  C. tex

  D. tedex

  Correct Answer: A