156-585 CheckPoint Exam Questions and Free Practice Test

Question 19

You are upgrading your NOC Firewall (on a Check Point Appliance) from R77 to R80 30 but you did not touch the security policy After the upgrade you can't connect to the new R80 30 SmartConsole of the upgraded Firewall anymore What is a possible reason for this?

A. new new console port is 19009 and a access rule ts missing

B. the license became invalig and the firewall does not start anymore

C. the upgrade process changed the interfaces and IP adresses and you have to switch cables

D. the IPS System on the new R80.30 Version prohibits direct Smartconsole access to a standalone firewall

Correct Answer:D

Question 20

If IPS protections that prevent SecureXL from accelerating traffic, such as Network Quota, Fingerprint Scrambling. TTL Masking etc, have to be used, what is a recommended practice to enhance the performance of the gateway?

A. Use the IPS exception mechanism

B. Disable all such protections

C. Disable SecureXL and use CoreXL

D. Upgrade the hardware to include more Cores and Memory

Correct Answer:C

Question 21

What does CMI stand for in relation to the Access Control Policy?

A. Content Matching Infrastructure

B. Content Management Interface

C. Context Management Infrastructure

D. Context Manipulation Interface

Correct Answer:C

Question 22

What is the purpose of the Hardware Diagnostics Tool?

A. Verifying that Check Point Appliance hardware is functioning correctly

B. Verifying the Security Management Server hardware is functioning correctly

C. Verifying that Security Gateway hardware is functioning correctly

D. Verifying that Check Point Appliance hardware is actually broken

Correct Answer:B

Question 23

The two procedures available for debugging in the firewall kernel are
i fw ctl zdebug
ii fw ctl debug/kdebug
Choose the correct statement explaining the differences in the two

A. (i) Is used for general debugging, has a small buffer and is a quick way to set kernel debug flags to get an output via command linewhereas (11) is useful when there is a need for detailed debugging and requires additional steps to set the buffer and get an output via command line

B. (i) is used to debug the access control policy only, however (n) can be used to debug a unified policy

C. (i) is used to debug only issues related to dropping of traffic, however (n) can be used for any firewall issue including NATing, clustering etc.

D. (i) is used on a Security Gateway, whereas (11) is used on a Security Management Server

Correct Answer:C

Question 24

What process monitors, terminates, and restarts critical Check Point processes as necessary?

A. CPWD

B. CPM

C. FWD

D. FWM

Correct Answer:A

START 156-585 EXAM