156-585 CheckPoint Exam Questions and Free Practice Test

Question 7

Where do Protocol parsers register themselves for IPS?

A. Passive Streaming Library

B. Other handlers register to Protocol parser

C. Protections database

D. Context Management Infrastructure

Correct Answer:A

Question 8

Which of the following is a component of the Context Management Infrastructure used to collect signatures in user space from multiple sources, such as Application Control and IPS. and compiles them together into unified Pattern Matchers?

A. CMI Loader

B. cpas

C. PSL - Passive Signature Loader

D. Context Loader

Correct Answer:A

Question 9

Which command is most useful for debugging the fwaccel module?

A. fw zdebug

B. securexl debug

C. fwaccel dbg

D. fw debug

Correct Answer:C

Question 10

You are running R80.XX on an open server and you see a high CPU utilization on your 12 CPU cores You now want to enable Hyperthreading to get more cores to gain some performance. What is the correct way to achieve this?

A. Hyperthreading is not supported on open servers, on on Check Point Appliances

B. just turn on HAT in the bios of the server and boot it

C. just turn on HAT in the bios of the server and after it has booted enable it in cpconfig

D. in dish run set HAT on

Correct Answer:A

Question 11

What command is used to find out which port Multi-Portal has assigned to the Mobile Access Portal?

A. mpclient getdata sslvpn

B. netstat -nap | grep mobile

C. mpclient getdata mobi

D. netstat getdata sslvpn

Correct Answer:D

Question 12

What is the difference in debugging a S2S or C2S (using Check Point VPN Client) VPN?

A. there is no difference

B. the C2S VPN uses a different VPN daemon and there a second VPN debug

C. the C2S VPN can not be debugged as it uses different protocols for the key exchange

D. the C2S client uses Browser based SSL vpn and can’t be debugged

Correct Answer:D

START 156-585 EXAM