[2026] CheckPoint Check Point Certified Troubleshooting Expert

문제1

Which situation triggers an IPS bypass under load on a 24-core Check Point appliance?

A. all CPU core most be above the threshold for more than 10 seconds

B. a single CPU core must be above the threshold for more than 10 seconds, but is must be the same core during this time

C. the average cpu utilization over all cores must be above the threshold for 1 second

D. any of the CPU cores is above the threshold for more than 10 seconds

정답: D

문제2

What is NOT a benefit of the fw ctl zdebug command?

A. Clean the buffer

B. Cannot be used to debug additional modules

C. Collect debug messages from the kernel

D. Automatically allocate a 1MB buffer

정답: B

문제3

What is the correct syntax to set all debug flags for Unified Policy related issues?

A. fw ctl debug -m UP all

B. fw ctl debug -m up all

C. fw ctl kdebug -m UP all

D. fw ctl debug -m fw all

정답: A

문제4

An administrator receives reports about issues with log indexing and text searching regarding an existing Management Server. In trying to find a solution she wants to check if the process responsible for this feature is running correctly. What is true about the related process?

A. cpd needs to be restarted manual to show in the list

B. fwm manages this database after initialization of the ICA

C. solr is a child process of cpm

D. fwssd crashes can affect therefore not show in the list

정답: C

문제5

What is the proper command for allowing the system to create core files?

A. service core-dump start

B. >set core-dump enable
>save config

C. # set core-dump enable
# save config

D. $FWDIR/scripts/core-dump-enable.sh

정답: B

문제6

What command is usually used for general firewall kernel debugging and what is the size of the buffer that is automatically enabled when using the command?

A. fw ctl kdeoug. buffer size is 32000 KB

B. fw dl zdebug, buffer size is 1 MB

C. fw ell zdebug. buffer size is 32768 KB

D. fw ctl debug, buffer size is 1024 KB

정답: A

문제7

URL Filtering is an essential part of Web Security in the Gateway. For the Security Gateway to perform a URL lookup when a client makes a URL request, where is the sync-request forwarded from if a sync-request is required''

A. RAD Kernel Space

B. RAD User Space

C. URLF Online Service

D. URLF Kernel Client

정답: D

문제8

Joey is configuring a site-to-site VPN with his business partner. On Joey's site he has a Check Point R80.10 Gateway and his partner uses Cisco ASA 5540 as a gateway.
Joey's VPN domain on the Check Point Gateway object is manually configured with a group object that contains two network objects:
VPN_Domain3 = 192.168.14.0/24
VPN_Domain4 = 192.168.15.0/24
Partner's site ACL as viewed from "show run"
access-list JOEY-VPN extended permit ip 172.26.251.0 255.255.255.0 192.168.14.0 255.255.255.0 access-list JOEY-VPN extended permit ip 172.26.251.0 255.255.255.0 192.168.15.0 255.255.255.0 When they try to establish VPN tunnel, it fails. What is the most likely cause of the failure given the information provided?

A. Tunnel falls on partner site. It is likely that the Cisco ASA 5540 will reject the Phase 2 negotiation. Check Point continues to present its own encryption domain as 192.168.14.0/24 and 192.168.15.0/24, but the peer expects the one network 192.168.14.0/23

B. Tunnel fails on partner site. It is likely that the Cisco ASA 5540 will reject the Phase 2 negotiation. Check Point continues to present its own encryption domain as 192.168.14.0/23, but the peer expects the two distinct networks 192.168.14.0/24 and 192.168.15.0/24.

C. Tunnel falls on partner site. It is likely that the Cisco ASA 5540 will reject the Phase 2 negotiation due to the algorithm mismatch.

D. Tunnel fails on Joey's site, because he misconfigured IP address of VPN peer.

정답: B

문제9

Select the technology that does the following actions
- provides reassembly via streaming for TCP
- handles packet reordering and congestion
- handles payload overlap
- provides consistent stream of data to protocol parsers

A. fwtcpstream

B. Passive Streaming Library

C. Context Management

D. Pre-Protocol Parser

정답: B

CheckPoint Check Point Certified Troubleshooting Expert - 156-585무료 덤프문제 풀어보기

우리와 연락하기

유용한 링크

최신 업데이트