156-585 CheckPoint Exam Questions and Free Practice Test

Question 13

How many captures does the command "fw monitor -p all" take?

A. All 15 of the inbound and outbound modules

B. All 4 points of the fw VM modules

C. 1 from every inbound and outbound module of the chain

D. The -p option takes the same number of captures, but gathers all of the data packet

Correct Answer:C

Question 14

What is the best way to resolve an issue caused by a frozen process?

A. Reboot the machine

B. Restart the process

C. Kill the process

D. Power off the machine

Correct Answer:B

Question 15

You are trying to establish a VPN tunnel between two Security Gateways but fail. What initial steps will you make to troubleshoot the issue

A. capture traffic on both tunnel members and collect debug of IKE and VPND daemon

B. capture traffic on both tunnel members and collect kernel debug for fw module with vm, crypt, conn and drop flags, then collect debug of IKE and VPND daemon

C. collect debug of IKE and VPND daemon and collect kernel debug for fw module with vm, crypt, conn and drop flags

D. capture traffic on both tunnel members and collect kernel debug for fw module with vm, crypt, conn and drop flags

Correct Answer:A

Question 16

Your fwm constantly crashes and is restarted by the watchdog. You can't find any coredumps related to this process, so you need to check If coredumps are enabled at all How can you achieve that?

A. in dish run show core-dump status

B. in expert mode run show core-dump status

C. in dish run set core-dump status

D. in dish run show coredumb status

Correct Answer:D

Question 17

Which command do you need to execute to insert fw monitor after TCP streaming (out) in the outbound chain using absolute position? Given the chain was 1ffffe0, choose the correct answer.

A. fw monitor –po -0x1ffffe0

B. fw monitor –p0 ox1ffffe0

C. fw monitor –po 1ffffe0

D. fw monitor –p0 –ox1ffffe0

Correct Answer:A
https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/CP_R80.40_PerformanceTuning_AdminG

Question 18

Which process is responsible for the generation of certificates?

A. cpm

B. cpca

C. dbsync

D. fwm

Correct Answer:B

START 156-585 EXAM