CheckPoint 156-586 Exam Questions Instant Access

Question 1

During firewall kernel debug with fw ctl zdebug you received less information that expected. You noticed that a lot of messages were lost since the time the debug was started. What should you do to resolve this issue?

AIncrease debug buffer; Use fw ctl debug -buf 32768

BRedirect debug output to file; Use fw ctl debug -o ./debug.elg

CRedirect debug output to file; Use fw ctl zdebug -o ./debug.elg

DIncrease debug buffer; Use fw ctl zdebug -buf 32768

Answer : A

Question 2

Which of these packet processing components stores Rule Base matching state-related information?

AObservers

BClassifiers

CManager

DHandlers

Answer : D

Question 3

The Check Point Firewall Kernel is the core component of the Gaia operating system and an integral part of traffic inspection process. There are two procedures available for debugging the firewall kernel. Which procedure/command is used for detailed troubleshooting and needs more resources?

Afw debug/kdebug

Bfw ctl zdebug

Cfw debug/kdebug ctl

Dfw ctl debug/kdebug

Answer : D

Question 4

Which process is responsible for the generation of certificates?

Adbsync

Bcpm

Cfwm

Dcpca

Answer : D

Question 5

What is correct about the Resource Advisor (RAD) service on the Security Gateways?

ARAD functions completely in user space. The Pattern Matter (PM) module of the CMI looks up for URLs in the cache and if not found, contact the RAD process in user space to do online categorization

BRAD is completely loaded as a kernel module that looks up URL in cache and if not found connects online for categorization. There is no user space involvement in this process

CRAD is not a separate module, it is an integrated function of the W kernel module and does all operations in the kernel space

DRAD has a kernel module that looks up the kernel cache, notifies client about hits and misses and forwards a-sync requests to RAD user space module which is responsible for online categorization

Answer : D

Question 6

What is the kernel process for Content Awareness that collects the data from the contexts received from the CMI and decides if the file is matched by a data type?

Acntawmod

Bdlpda

Cdlpu

Dcntmgr

Answer : A

Question 7

You are using the Identity Collector with Identity Awareness in large environment. Users report that they cannot access resources on Internet. You identify that the traffic is matching the cleanup rule instead of the proper rule with Access Roles using the IDC. How can you check if IDC is working?

Apep debug idc on

Bpdp debug set IDP all all

Cad query | debug on

Dpdp connections idc

Answer : D

CheckPoint Check Point Certified Troubleshooting Expert - R81 156-586 Exam Questions