CheckPoint Check Point Certified Troubleshooting Expert - R81 - 156-586 FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

Your users have some issues connecting with Mobile Access VPN to your gateway. How can you debug the tunnel establishment?

A. in the file $VPNDIR/conf/httpd.conf change the line Loglevel .. To LogLevel debug and run vpn restart B. run fw ctl zdebug -m sslvpn all C. in the file $CVPNDIR/conf/httpd.conf change the line Loglevel .. To LogLevel debug and run cvpnrestart D. run vpn debug truncon

Discussion 0

Correct Answer: B Vote an answer

Question 2

SmartEvent utilizes the Log Server, Correlation Unit and SmartEvent Server to aggregate logs and identify security events. The three main processes that govern these SmartEvent components are:

A. eventiasv, eventiarp,eventiacu B. cpsemd, cpsead, and DBSync C. cpcu, cplog, cpse D. fwd, secu, sesrv

Discussion 0

Correct Answer: B Vote an answer

Question 3

What is correct about the Resource Advisor (RAD) service on the Security Gateways?

A. RAD has a kernel module that looks up the kernel cache, notifies client about hits and misses and forwards a-sync requests to RAD user space module which is responsible for online categorization B. RAD is completely loaded as a kernel module that looks up URL in cache and if not found connects online for categorization. There is no user space involvement in this process C. RAD functions completely in user space. The Pattern Matter (PM) module of the CMI looks up for URLs in the cache and if not found, contact the RAD process in user space to do online categorization D. RAD is not a separate module, it is an integrated function of the W kernel module and does all operations in the kernel space

Discussion 0

Correct Answer: A Vote an answer

Question 4

In Check Point's Packet Processing Infrastructure, what is the role of Observers?

A. Observers monitor the state of Check Point gateways and report it to the security manager B. They store Rule Base matching state related information C. Observers decide whether or not to publish a CLOB to the Security Policy D. Observers attach object IDs to traffic

Discussion 0

Correct Answer: D Vote an answer

Question 5

The management configuration stored in the Postgres database is partitioned into several relational database domains. What is the purpose of the Global Domain?

A. This domain is used as the global database to track the changes made by multiple administrators on the same objects prior to publishing. B. This domain is used as the global database for MDSM and contains global objects and policies. C. Global Domains is used by the IPS software blade to map the IDs to the corresponding countries according to the IpToCountry.csv file. D. This domain is used as the global database to back up the objects referencing the corresponding object attributes from the System Domain.

Discussion 0

Correct Answer: D Vote an answer

Question 6

After kernel debug with "fw ctl debug" you received a huge amount of information. It was saved in a very large file that is difficult to open and analyze with standard text editors. Suggest a solution to solve this issue.

A. Use "fw ctl zdebug" because of 1024KB buffer size B. Divide debug information into smaller files. Use "fw ctl kdebug -f -o "filename" -m 25 - s "1024" C. Use Check Point InfoView utility to analyze debug output D. Reduce debug buffer to 1024KB and run debug for several times

Discussion 0

Correct Answer: B Vote an answer

Question 7

What process monitors, terminates, and restarts critical Check Point processes as necessary?

A. FWD B. FWM C. CPVVD D. CPM

Discussion 0

Correct Answer: C Vote an answer

Question 8

What is the simplest and most efficient way to check all dropped packets in real time?

A. tail -f $FWDIR/log/fw.log |grep drop in expert mode B. Smartlog C. cat /dev/fw1/log in expert mode D. fw ctl zdebug + drop in expert mode

Discussion 0

Correct Answer: D Vote an answer