CheckPoint 156-585 Exam Practice Test Instant Access

Question 1

James is using the same filter expression in fw monitor for CITRIX very often and instead of typing this all the time he wants to add it as a macro to the fw monitor definition file. What's the name and location of this file?

A$FWDIR/lib/fwmonltor.def

B$FWDIR/conf/fwmonltor.def

C$FWDIR/lib/tcpip.def

D$FWDIR/lib/fw.monitor

Answer : A

Question 2

What is the best way to resolve an issue caused by a frozen process?

AReboot the machine

BRestart the process

CKill the process

DPower off the machine

Answer : B

Question 3

What process is responsible for sending and receiving logs in the management server?

AFWD

BCPM

CFWM

DCPD

Answer : A

Question 4

Which command can be run in Expert mode to verify the core dump settings?

Agrep cdm /config/db/coredump

Bgrep cdm /config/db/initial

Cgrep $FWDIR/config/db/initial

Dcat /etc/sysconfig/coredump/cdm.conf

Answer : C

Question 5

What are four main database domains?

ASystem, Global, Log, Event

BSystem, User, Host, Network

CLocal, Global, User, VPN

DSystem, User, Global, Log

Answer : D

Question 6

You have configured IPS Bypass Under Load function with additional kernel parameters ids_tolerance_no_stress=15 and ids_tolerance_stress-15 For configuration you used the *fw ctl set' command After reboot you noticed that these parameters returned to their default values What do you need to do to make this configuration work immediately and stay permanent?

ASet these parameters again with ''fw ctl set'' and edit appropriate parameters in $FWDIR/boot/modules/ fwkern.conf

BUse script $FWDIR/bin IpsSetBypass.sh to set these parameters

CSet these parameters again with ''fw ctl set'' and save configuration with ''save config''

DEdit appropriate parameters in $FWDIR/boot/modules/fwkern.conf
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk62848&partition=Advanced&product=IPS

Answer : A

Question 7

When a User Mode process suddenly crashes it may create a core dump file. Which of the following information is available in the core dump and may be used to identify the root cause of the crash?

i Program Counter

ii Stack Pointer

ii. Memory management information

iv Other Processor and OS flags / information

Ai, ii, lii and iv

Bi and n only

Ciii and iv only

DD Only iii

Answer : C

CheckPoint 156-585 Check Point Certified Troubleshooting Expert Exam Practice Test