Check Point 156-585 Exam Questions Simulate Actual 156-585 Exam

1. The Check Point Firewall Kernel is the core component of the Gala operating system and an integral part of traffic inspection process. There are two procedures available for debugging the firewall kernel .

Which procedure/command is used for detailed troubleshooting and needs more resources?

2. The management configuration stored in the Postgres database is partitioned into several relational database Domains, like - System, User, Global and Log Domains. The User Domain stores the network objects and security policies.

Which of the following is stored in the Log Domain?

3. When debugging is enabled on firewall kernel module using the ‘fw ctl debug’ command with required options, many debug messages are provided by the kernel that help the administrator to identify issues .

Which of the following is true about these debug messages generated by the kernel module?

4. What is the benefit of running "vpn debug trunc over "vpn debug on"?

5. You need to run a kernel debug over a longer period of time as the problem occurs only once or twice a week. Therefore, you need to add a timestamp to the kernel debug and write the output to a file but you can’t afford to fill up all the remaining disk space and you only have 10 GB free for saving the debugs .

What is the correct syntax for this?

6. Which Daemon should be debugged for HTTPS Inspection related issues?

7. What is the simplest and most efficient way to check all dropped packets in real time?

8. Which command is used to write a kernel debug to a file?

9. Which of the following is NOT a valid "fwaccel" parameter?

10. What is the main SecureXL database for tracking the acceleration status of traffic?

11. You are running R80.XX on an open server and you see a high CPU utilization on your 12 CPU cores You now want to enable Hyperthreading to get more cores to gain some performance.

What is the correct way to achieve this?

12. Troubleshooting issues with Mobile Access requires the following:

13. When running a debug with fw monitor, which parameter will create a more verbose output?

14. What is the correct syntax to turn a VPN debug on and create new empty debug files?

15. Which command(s) will turn off all vpn debug collection?

16. Which is the correct “fw monitor” syntax for creating a capture file for loading it into WireShark?

17. To check the current status of hyper-threading, which command would you execute in expert mode?

18. After kernel debug with "fw ctl debug" you received a huge amount of information It was saved in a very large file that is difficult to open and analyze with standard text editors Suggest a solution to solve this issue.

19. Which command can be run in Expert mode lo verify the core dump settings?

20. What file extension should be used with fw monitor to allow the output file to be imported and read in Wireshark?

21. What are the maximum kernel debug buffer sizes, depending on the version

22. Which one of the following is NOT considered a Solr core partition:

23. Where will the usermode core files be located?

24. You are trying to establish a VPN tunnel between two Security Gateways but fail .

What initial steps will you make to troubleshoot the issue

25. What command is usually used for general firewall kernel debugging and what is the size of the buffer that is automatically enabled when using the command?

26. Which one of the following is NOT considered a Solr core partition:

27. How many captures does the command "fw monitor -p all" take?

28. How many tiers of pattern matching can a packet pass through during IPS inspection?

29. What is the buffer size set by the fw ctl zdebug command?

30. For TCP connections, when a packet arrives at the Firewall Kernel out of sequence or fragmented, which layer of IPS corrects this to allow for proper inspection?

31. Joey is configuring a site-to-site VPN with his business partner. On Joey’s site he has a Check Point R80.10 Gateway and his partner uses Cisco ASA 5540 as a gateway.

Joey’s VPN domain on the Check Point Gateway object is manually configured with a group object that contains two network objects:

VPN_Domain3 = 192.168.14.0/24

VPN_Domain4 = 192.168.15.0/24

Partner’s site ACL as viewed from “show run”

access-list JOEY-VPN extended permit ip 172.26.251.0 255.255.255.0 192.168.14.0 255.255.255.0

access-list JOEY-VPN extended permit ip 172.26.251.0 255.255.255.0 192.168.15.0 255.255.255.0

When they try to establish VPN tunnel, it fails .

What is the most likely cause of the failure given the information provided?

32. Which of the following is contained in the System Domain of the Postgres database?

33. What is the correct syntax to set all debug flags for Unified Policy related issues?