Exam Questions Answers Braindumps 156-587 Exam Dumps PDF Questions
Download Free CheckPoint 156-587 Real Exam Questions
NEW QUESTION # 46
When viewing data for CPMI objects in the Postgres database, what table column should be selected to query for the object instance?
- A. CPM Global M
- B. GuiDBedit
- C. fwset
- D. CpmiHostCkp
Answer: C
NEW QUESTION # 47
When a User process or program suddenly crashes, a core dump is often used to examine the problem. Which command is used to enable the core-dumping via GAIA clish?
- A. set core-dump per process
- B. set core-dump total
- C. set core-dump enable
- D. set user-dump enable
Answer: C
NEW QUESTION # 48
Which of the following inputs is suitable for debugging HTTPS inspection issues?
- A. fw debug tls on TDERROR_ALL_ALL=5
- B. vpn debug cptls on
- C. fw ctl debug -m fw + conn drop cptls
- D. fw diag debug tls enable
Answer: C
NEW QUESTION # 49
When dealing with monolithic operating systems such as Gaia, where are system calls initiated from to achieve a required system level function?
- A. User Mode
- B. Medium Path
- C. Slow Path
- D. Kernel Mode
Answer: A
NEW QUESTION # 50
If the cpsemd process of SmartEvent has crashed or is having trouble coming up, then it usually indicates that __________.
- A. Cpd daemon is unable to connect to the log server
- B. The loqqed in administrator does not have permissions to run SmartEvent
- C. Postgres database is down
- D. The SmartEvent core on the Solr indexer has been deleted
Answer: C
NEW QUESTION # 51
PostgreSQL is a powerful, open source relational database management system. Check Point offers a command for viewing the database to interact with Postgres interactive shell. Which command do you need to enter the PostgreSQL interactive shell?
- A. psql_client cpm postgres
- B. psql_client postgres cpm
- C. mysql_client cpm postgres
- D. mysql -u root
Answer: A
NEW QUESTION # 52
Which process is responsible for the generation of certificates?
- A. dbsync
- B. fwm
- C. cpca
- D. cpm
Answer: C
NEW QUESTION # 53
John has renewed his NPTX License but he gets an error (contract for Anti-Bot expired). He wants to check the subscription status on the CLI of the gateway, what command can he use for this?
- A. fwm lie print
- B. show license status
- C. fw monitor license status
- D. cpstat antimalware-f subscription status
Answer: D
NEW QUESTION # 54
Which of the following file is commonly associated with troubleshooting crashes on a system such as the Security Gateway?
- A. tcpdump
- B. core dump
- C. CPMIL dump
- D. fw monitor
Answer: B
NEW QUESTION # 55
Captive Portal, PDP and PEP run in what space?
- A. CPM
- B. User
- C. Kernel
- D. FWD
Answer: B
NEW QUESTION # 56
What information does the doctor-log script supply?
- A. Logging rates. Logging Directories, List of troubleshooting tips
- B. Current and daily average logging rates. Indexing status, Size
- C. Repair options. Logging Rates, Logging Directories
- D. Logging errors. Exceptions, Repair options
Answer: B
NEW QUESTION # 57
If SmartLog is not active or failed to parse results from server, what commands can be run to re- enable the service?
- A. smartlogstart and smartlogstop
- B. smartlogstart and smartlogsetup
- C. smartlogrestart and smartlogstart
- D. smartloginit and smartlogstop
Answer: C
NEW QUESTION # 58
The Check Point Firewall Kernel is the core component of the Gaia operating system and an integral part of the traffic inspection process. There are two procedures available for debugging the firewall kernel. Which procedure/command is used for troubleshooting packet drops and other kernel activities while using minimal resources (1 MB buffer)?
- A. fw ctl debug/kdebug
- B. fw debug ctl
- C. fwk ctl debug
- D. fw ctl zdebug
Answer: A
NEW QUESTION # 59
Which of the following is contained in the System Domain of the Postgres database?
- A. Configuration data of log servers
- B. User modified configurations such as network objects
- C. Trusted GUI clients
- D. Saved queries for applications
Answer: C
NEW QUESTION # 60
During firewall kernel debug with fw ctl zdebug you received less information that expected. You noticed that a lot of messages were lost since the time the debug was started. What should you do to resolve this issue?
- A. Increase debug buffer; Use fw ctl zdebug -buf 32768
- B. Redirect debug output to file; Use fw ctl zdebug -o ./debug.elg
- C. Redirect debug output to file; Use fw ctl debug -o ./debug.elg
- D. Increase debug buffer; Use fw ctl debug -buf 32768
Answer: D
NEW QUESTION # 61
Check Point Threat Prevention policies can contain multiple policy layers and each layer consists of its own Rule Base.
Which Threat Prevention daemon is used for Anti-virus?
- A. in.emaild.mta
- B. in.emaild
- C. in.msd
- D. ctasd
Answer: D
Explanation:
ctasd: This daemon is responsible for Threat Emulation, Anti-Bot, Application Control, and various other security features, including Anti-virus. From Check Point R80.10 onwards, Anti-virus functionality is integrated within ctasd.
NEW QUESTION # 62
What does CMI stand for in relation to the Access Control Policy?
- A. Content Matching Infrastructure
- B. Context Management Infrastructure
- C. Content Management Interface
- D. Context Manipulation Interface
Answer: B
NEW QUESTION # 63
The two procedures available for debugging in the firewall kernel are
i. fw ctl zdebug
ii. fw ctl debug/kdebug
Choose the correct statement explaining the differences in the two
- A. (i) is used to debug the access control policy only, however (ii) can be used to debug a unified policy
- B. (i) is used on a Security Gateway, whereas (ii) is used on a Security Management Server
- C. (i) is used to debug only issues related to dropping of traffic, however (ii) can be used for any firewall issue including NATing, clustering etc.
- D. (i) is used for general debugging, has a small buffer and is a quick way to set kernel debug flags to getan output via command line whereas (ii) is useful when there is a need for detailed debugging and requires additional steps to set the buffer and get an output via command line
Answer: D
NEW QUESTION # 64
What Check Point process controls logging?
- A. CPM
- B. CPVVD
- C. CPD
- D. FWD
Answer: D
NEW QUESTION # 65
Which type of NAT allows both incoming and outgoing connections?
- A. Both Static and Hide NAT
- B. Static NAT
- C. Port NAT
- D. Hide NAT
Answer: B
NEW QUESTION # 66
Which of the following would NOT be a flag when debugging a unified policy?
- A. connection
- B. clob
- C. tls
- D. rulebase
Answer: C
NEW QUESTION # 67
The management configuration stored in the Postgres database is partitioned into several relational database domains. What is the purpose of the Global Domain?
- A. This domain is used as the global database for MDSM and contains global objects and policies.
- B. Global Domains is used by the IPS software blade to map the IDs to the corresponding countries according to the IpToCountry.csv file.
- C. This domain is used as the global database to track the changes made by multiple administrators on the same objects prior to publishing.
- D. This domain is used as the global database to back up the objects referencing the corresponding object attributes from the System Domain.
Answer: A
NEW QUESTION # 68
VPN issues may result from misconfiguration, communication failure, or incompatible default configurations between peers. Which basic command syntax needs to be used for troubleshooting Site-to-Site VPN issues?
- A. vpn debug truncon
- B. fw debug truncon
- C. cp debug truncon
- D. vpn truncon debuq
Answer: A
NEW QUESTION # 69
What function receives the AD log event information?
- A. ADLOG
- B. CPD
- C. PEP
- D. FWD
Answer: A
NEW QUESTION # 70
......
Latest CheckPoint 156-587 Real Exam Dumps PDF: https://www.actualtorrent.com/156-587-questions-answers.html
156-587 Exam Dumps, 156-587 Practice Test Questions: https://drive.google.com/open?id=1QyV2SFL_brwwhvirNkT6clbUTph9zTJS