156-585 Online Practice Questions and Answers

How can you start debug of the Unified Policy with all possible flags turned on?

A. fw ctl debug -m UP all

B. fw ctl debug -m UnifiedPolicy all

C. fw ctl debug -m fw + UP

D. fw ctl debug -m UP *

Some users from your organization have been reporting some connection problems with CIFS since this morning

You suspect an IPS issue after an automatic IPS update last night. So you want to perform a packet capture on uppercase I only directly after the IPS chain module (position 4 in the chain) to check If the packets pass the IPS. What command do you need to run?

A. fw monitor -ml -pi 5 -e

B. fw monitor -pi 5 -e

C. tcpdump -eni any

D. fw monitor -pi asm

What command is usually used for general firewall kernel debugging and what is the size of the buffer that is automatically enabled when using the command?

A. fw ctl debug, buffer size is 1024 KB

B. fw ell zdebug. buffer size is 32768 KB

C. fw dl zdebug, buffer size is 1 MB

D. fw ctl kdeoug. buffer size is 32000 KB

You are running R80.XX on an open server and you see a high CPU utilization on your 12 CPU cores You now want to enable Hyperthreading to get more cores to gain some performance. What is the correct way to achieve this?

A. Hyperthreading is not supported on open servers, on on Check Point Appliances

B. just turn on HAT in the bios of the server and boot it

C. just turn on HAT in the bios of the server and after it has booted enable it in cpconfig

D. in dish run set HAT on

Which of the following is NOT a valid "fwaccel" parameter?

A. stat

B. stats

C. templates

D. packets

Vanessa is reviewing ike.elg file to troubleshoot failed site-to-site VPN connection After sending Mam Mode Packet 5 the response from the peer is PAYLOAD-MALFORMED" What is the reason for failed VPN connection?

A. The authentication on Phase 1 is causing the problem.Pre-shared key on local gateway encrypted by the hash algorithm created in Packet 3 and Packet 4 doesn't match with the hash on the peer gateway generated by encrypting its preshared key

B. The authentication on Phase 2 is causing the problem Pre-shared key on local gateway encrypted by the hash algorithm created in Packets 1 and 2 doesn't match with the hash on the peer gateway generated by encrypting its pre-shared key

C. The authentication on Quick Mode is causing the problem Pre-shared key on local gateway encrypted by the hash algorithm created in Packets 3 and 4 doesn't match with the hash on the peer gateway generated by encrypting its preshared key

D. The authentication on Phase 1 is causing the problem Pre-shared key on local gateway encrypted by the hash algorithm doesn't match with the hash on the peer gateway generated by encrypting its pre-shared key created in Packet 1 and Packet 2

What file contains the RAD proxy settings?

A. rad_settings.C

B. rad_services.C

C. rad_scheme.C

D. rad_control.C

What is the difference in debugging a S2S or C2S (using Check Point VPN Client) VPN?

A. there is no difference

B. the C2S VPN uses a different VPN daemon and there a second VPN debug

C. the C2S VPN can not be debugged as it uses different protocols for the key exchange

D. the C2S client uses Browser based SSL vpn and can't be debugged

When a User Mode process suddenly crashes it may create a core dump file. Which of the following information is available in the core dump and may be used to identify the root cause of the crash? i Program Counter ii Stack Pointer

ii.

Memory management information iv Other Processor and OS flags / information

A.

i, ii, lii and iv

B.

i and n only

C.

iii and iv only

D.

Only iii

What acceleration mode utlizes multi-core processing to assist with traffic processing?

A. CoreXL

B. SecureXL

C. HyperThreading

D. Traffic Warping