お手軽156-585問題集PDFのベスト問題集を使おう！高得点目指すならここ
CCTE 156-585試験と認定テストエンジン
CheckPoint 156-585 認定試験の出題範囲：
| トピック | 出題範囲 |
|---|---|
| トピック 1 |
|
| トピック 2 |
|
| トピック 3 |
|
| トピック 4 |
|
| トピック 5 |
|
質問 43
The two procedures available for debugging in the firewall kernel are
i fw ctl zdebug
ii fw ctl debug/kdebug
Choose the correct statement explaining the differences in the two
- A. (i) is used to debug the access control policy only, however (n) can be used to debug a unified policy
- B. (i) is used to debug only issues related to dropping of traffic, however (n) can be used for any firewall issue including NATing, clustering etc.
- C. (i) Is used for general debugging, has a small buffer and is a quick way to set kernel debug flags to get an output via command line whereas (11) is useful when there is a need for detailed debugging and requires additional steps to set the buffer and get an output via command line
- D. (i) is used on a Security Gateway, whereas (11) is used on a Security Management Server
正解: B
質問 44
When a User Mode process suddenly crashes it may create a core dump file. Which of the following information is available in the core dump and may be used to identify the root cause of the crash?
i Program Counter
ii Stack Pointer
ii. Memory management information
iv Other Processor and OS flags / information
- A. iii and iv only
- B. i and n only
- C. i, ii, lii and iv
- D. D Only iii
正解: A
質問 45
Where do Protocol parsers register themselves for IPS?
- A. Context Management Infrastructure
- B. Protections database
- C. Passive Streaming Library
- D. Other handlers register to Protocol parser
正解: C
質問 46
What does SIM handle?
- A. OPSEC connects to SecureXL
- B. FW kernel to SXL kernel hand off
- C. Accelerating packets
- D. Hardware communication to the accelerator
正解: A
質問 47
Troubleshooting issues with Mobile Access requires the following:
- A. 'ma_vpnd' process on Secunty Gateway
- B. Debug logs of FWD captured with the command - 'fw debug fwd on
TDERROR_MOBILE_ACCESS=5' - C. Standard VPN debugs, packet captures, and debugs of cvpnd' process on Security Gateway
- D. Standard VPN debugs and packet captures on Security Gateway, debugs of "cvpnd' process on Security Management
正解: C
質問 48
An administrator receives reports about issues with log indexing and text searching regarding an existing Management Server. In trying to find a solution she wants to check if the process responsible for this feature is running correctly. What is true about the related process?
- A. cpd needs to be restarted manual to show in the list
- B. fwm manages this database after initialization of the ICA
- C. solr is a child process of cpm
- D. fwssd crashes can affect therefore not show in the list
正解: C
質問 49
What is the buffer size set by the fw ctl zdebug command?
- A. 1 GB
- B. 8GB
- C. 8MB
- D. 1 MB
正解: D
質問 50
The management configuration stored in the Postgres database is partitioned into several relational database Domains, like - System, User, Global and Log Domains. The User Domain stores the network objects and security policies. Which of the following is stored in the Log Domain?
- A. Active Logs received from Security Gateways and Management Servers
- B. Configuration data of Log Servers and saved queries for applications
- C. Active and past logs received from Gateways and Servers
- D. Log Domain is not stored in Postgres database, it is part of Solr indexer only
正解: D
質問 51
How can you increase the ring buffer size to 1024 descriptors?
- A. echo rx_ringsize=1024>>/etc/sysconfig/sysctl.conf
- B. dbedit>modify properties firewall_properties rx_ringsize 1024
- C. fw ctl int rx_ringsize 1024
- D. set interface eth0 rx-ringsize 1024
正解: D
質問 52
What is the most efficient way to view large fw monitor captures and run filters on the file?
- A. snoop
- B. CLISH
- C. wireshark
- D. CLI
正解: C
質問 53
Which of the following is a component of the Context Management Infrastructure used to collect signatures in user space from multiple sources, such as Application Control and IPS. and compiles them together into unified Pattern Matchers?
- A. CMI Loader
- B. Context Loader
- C. PSL - Passive Signature Loader
- D. cpas
正解: A
質問 54
PostgreSQL is a powerful, open source relational database management system Check Point offers a command for viewing the database to interact with Postgres interactive shell Which command do you need to enter the PostgreSQL interactive shell?
- A. psql_c!ieni postgres cpm
- B. mysql_client cpm postgres
- C. psql_client cpm postgres
- D. mysql -u root
正解: B
質問 55
Which of the following is contained in the System Domain of the Postgres database?
- A. Trusted GUI clients
- B. Saved queries for applications
- C. User modified configurations such as network objects
- D. Configuration data of log servers
正解: C
質問 56
What is NOT a benefit of the fw ctl zdebug command?
- A. Automatically allocate a 1MB buffer
- B. Clean the buffer
- C. Collect debug messages from the kernel
- D. Cannot be used to debug additional modules
正解: D
質問 57
What file extension should be used with fw monitor to allow the output file to be imported and read in Wireshark?
- A. .cap
- B. .pcap
- C. .tgz
- D. .exe
正解: A
質問 58
The Check Pom! Firewall Kernel is the core component of the Gaia operating system and an integral part of the traffic inspection process There are two procedures available for debugging the firewall kernel Which procedure/command is used for troubleshooting packet drops and other kernel activites while using minimal resources (1 MB buffer)?
- A. fw ctl debug/kdebug
- B. fwk ctl debug
- C. fw ctl zdebug
- D. fw debug ctl
正解: C
質問 59
What is the correct syntax to turn a VPN debug on and create new empty debug files?
- A. vpndebug trunc on
- B. vpn debug trunkon
- C. vpn debug truncon
- D. vpn kdebug on
正解: B
質問 60
Check Point provides tools & commands to help you to identify issues about products and applications. Which Check Point command can help you to display status and statistics information for various Check Point products and applications?
- A. cpstat
- B. CPview
- C. fwstat
- D. CPstat
正解: A
質問 61
RAD is initiated when Application Control and URL Filtering blades are active on the Security Gateway What is the purpose of the following RAD configuration file SFWDIR/conf/rad_settings.C?
- A. This file contains the location information tor Application Control and/or URL Filtering entitlements
- B. This file contains all the host name settings for the online application detection engine
- C. This file contains RAD proxy settings
- D. This file contains the information on how the Security Gateway reaches the Security Managers RAD service for Application Control and URL Filtering
正解: D
質問 62
What is the kernel process for Content Awareness that collects the data from the contexts received from the CMI and decides if the file is matched by a data type?
- A. dlpu
- B. cntmgr
- C. dlpda
- D. cntawmod
正解: D
質問 63
Which command can be run in Expert mode to verify the core dump settings?
- A. cat /etc/sysconfig/coredump/cdm.conf
- B. grep $FWDIR/config/db/initial
- C. grep cdm /config/db/initial
- D. grep cdm /config/db/coredump
正解: B
質問 64
What is the proper command for allowing the system to create core files?
- A. >set core-dump enable
>save config - B. service core-dump start
- C. $FWDIR/scripts/core-dump-enable.sh
- D. # set core-dump enable
# save config
正解: A
質問 65
Which command do you need to execute to insert fw monitor after TCP streaming (out) in the outbound chain using absolute position? Given the chain was 1ffffe0, choose the correct answer.
- A. fw monitor -p0 ox1ffffe0
- B. fw monitor -po 1ffffe0
- C. fw monitor -p0 -ox1ffffe0
- D. fw monitor -po -0x1ffffe0
正解: D
解説:
Explanation
https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/CP_R80.40_PerformanceTuning_AdminG
質問 66
Troubleshooting issues with Mobile Access requires the following:
- A. 'ma_vpnd' process on Secunty Gateway
- B. Debug logs of FWD captured with the command - 'fw debug fwd on TDERROR_MOBILE_ACCESS=5'
- C. Standard VPN debugs, packet captures, and debugs of cvpnd' process on Security Gateway
- D. Standard VPN debugs and packet captures on Security Gateway, debugs of "cvpnd' process on Security Management
正解: C
質問 67
You need to run a kernel debug over a longer period of time as the problem occurs only once or twice a week. Therefore, you need to add a timestamp to the kernel debug and write the output to a file but you can't afford to fill up all the remaining disk space and you only have 10 GB free for saving the debugs. What is the correct syntax for this?
- A. fw ctl kdebug -T -m 10 -s 1000000 -o debugfilename
- B. fw ctl kdebug -T -f -m 10 -s 1000000 > debugfilename
- C. fw ctl kdebug -T -f -m 10 -s 1000000 -o debugfilename
- D. fw ctl debug -T -f -m 10 -s 1000000 -o debugfilename
正解: D
質問 68
......
無料提供中の156-585試験問題集で（2023年最新のPDF問題集）信頼度の高い156-585テストエンジン：https://jp.fast2test.com/156-585-premium-file.html
156-585のPDFで最近更新された問題です集試験点数を伸ばそう：https://drive.google.com/open?id=1fM4JSYR5cCzRjKGm4pwWtBawDkDjINT1