156-585 Exam - Free Checkpoint Questions and Answers

Question #11 (Topic: Topic 1)

During firewall kernel debug with fw ctl zdebug you received less information that expected. You noticed that a lot of messages were lost since the time the debug was started. What should you do to resolve this issue?

A. Increase debug buffer; Use fw ctl debug -buf 32768 B. Redirect debug output file; Use fw ctl zdebug -o ./debug.elg C. Increase debug buffer; Use fw ctl zdebug -buf 32768 D. Redirect debug output file; Use fw ctl debug -o ./debug.elg

Answer: A

Question #12 (Topic: Topic 1)

Where do Protocol parsers register themselves for IPS?

A. Passive Streaming Library B. Other handlers register to Protocol parser C. Protections database D. Context Management Infrastructure

Answer: A

Question #13 (Topic: Topic 1)

Which command can be run in Expert mode to verify the core dump settings?

A. grep cdm /config/db/coredump B. grep cdm /config/db/initial C. grep $FWDIR/config/db/initial D. cat /etc/sysconfig/coredump/cdm.conf

Answer: C

Question #14 (Topic: Topic 1)

The two procedures available for debugging in the firewall kernel are:
i. fw ctl zdebug
ii. fw ctl debug/kdebug
Choose the correct statement explaining the difference in the two.

A. (i) Is used for general debugging, has a small buffer and is a quick way to set kernel debug flags to get an output via command line whereas (ii) is useful when there is a need for detailed debugging and requires additional steps to set the buffer and get an output via command line B. (i) is used to debug the access control policy only, however (ii) can be used to debug a unified policy C. (i) is used to debug only issues related to dropping traffic, however (ii) can be used for any firewall issue including NATing, clustering etc. D. (i) is used on a Security Gateway, whereas (ii) is used on a Security Management Server

Answer: C

Question #15 (Topic: Topic 1)

If the cpsemd process of SmartEvent has crashed or is having trouble to coming up, then it usually indicates that _______________.

A. Postgres database is down B. Cpd daemon is unable to connect to the log server C. The SmartEvent core on the Solr indexer has been deleted D. The logged in administrator does not have permissions to run SmartEvent

Answer: C

Checkpoint 156-585 - Check Point Certified Troubleshooting Expert Exam