[2024年12月05日] 更新された156-587試験PDF問題集にはFast2test合格保証付き
あなたを合格させるCheckPoint試験には156-587試験問題集
質問 # 39
The Check Point Firewall Kernel is the core component of the Gaia operating system and an integral part of the traffic inspection process. There are two procedures available for debugging the firewall kernel. Which procedure/command is used for troubleshooting packet drops and other kernel activities while using minimal resources (1 MB buffer)?
- A. fw ctl debug/kdebug
- B. fw debug ctl
- C. fw ctl zdebug
- D. fwk ctl debug
正解：A
質問 # 40
What is the Security Gateway directory where an administrator can find vpn debug log files generated during Site-to-Site VPN troubleshooting?
- A. $CPDIR/conf/
- B. $FWDIR/log/
- C. /opt/CPsuiteR80/vpn/log/
- D. $FWDIR/conf/
正解：B
質問 # 41
What is the port for the Log Collection on Security Management Server?
- A. 0
- B. 1
- C. 2
- D. 3
正解：D
質問 # 42
Which Daemon should be debugged for HTTPS Inspection related issues?
- A. FWD
- B. VPND
- C. HTTPD
- D. WSTLSD
正解：D
質問 # 43
Captive Portal, PDP and PEP run in what space?
- A. FWD
- B. User
- C. CPM
- D. Kernel
正解：B
質問 # 44
Which of the following inputs is suitable for debugging HTTPS inspection issues?
- A. fw ctl debug -m fw + conn drop cptls
- B. fw debug tls on TDERROR_ALL_ALL=5
- C. fw diag debug tls enable
- D. vpn debug cptls on
正解：A
質問 # 45
Which of the following daemons is used for Threat Extraction?
- A. tex
- B. scrubd
- C. extractd
- D. tedex
正解：B
質問 # 46
What is the most efficient way to read an IKEv2 Debug?
- A. IKE view
- B. any xml editor
- C. vi on the cl
- D. notepad++
正解：A
解説：
https://support.checkpoint.com/results/sk/sk30994
質問 # 47
During firewall kernel debug with fw ctl zdebug you received less information that expected. You noticed that a lot of messages were lost since the time the debug was started. What should you do to resolve this issue?
- A. Redirect debug output to file; Use fw ctl debug -o ./debug.elg
- B. Increase debug buffer; Use fw ctl debug -buf 32768
- C. Redirect debug output to file; Use fw ctl zdebug -o ./debug.elg
- D. Increase debug buffer; Use fw ctl zdebug -buf 32768
正解：B
質問 # 48
Which of the following file is commonly associated with troubleshooting crashes on a system such as the Security Gateway?
- A. fw monitor
- B. core dump
- C. tcpdump
- D. CPMIL dump
正解：B
質問 # 49
What version of Check Point can Security Gateways begin dynamically distributing Logs between log servers?
- A. R30
- B. R81
- C. R77
- D. R75
正解：B
質問 # 50
VPN's allow traffic to pass through the Internet securely by encrypting the traffic as it enters the VPN tunnel and then decrypting the traffic as it exists. Which process is responsible for Mobile VPN connections?
- A. vpnk
- B. vpnd
- C. fwk
- D. cvpnd
正解：D
質問 # 51
An administrator receives reports about issues with log indexing and text searching regarding an existing Management Server. In trying to find a solution she wants to check if the process responsible for this feature is running correctly. What is true about the related process?
- A. solr is a child process of cpm
- B. cpd needs to be restarted manual to show in the list
- C. fwssd crashes can affect therefore not show in the list
- D. fwm manaqes this database after initialization of the 1CA
正解：A
質問 # 52
The two procedures available for debugging in the firewall kernel are
i. fw ctl zdebug
ii. fw ctl debug/kdebug
Choose the correct statement explaining the differences in the two
- A. (i) is used on a Security Gateway, whereas (ii) is used on a Security Management Server
- B. (i) is used for general debugging, has a small buffer and is a quick way to set kernel debug flags to getan output via command line whereas (ii) is useful when there is a need for detailed debugging and requires additional steps to set the buffer and get an output via command line
- C. (i) is used to debug the access control policy only, however (ii) can be used to debug a unified policy
- D. (i) is used to debug only issues related to dropping of traffic, however (ii) can be used for any firewall issue including NATing, clustering etc.
正解：B
質問 # 53
You receive reports that Users cannot browse internet sites. You are using identity awareness with AD Query and Identity Collector in addition you have the Browser Based Authentication Enabled.
What command can be used to debug the problem?
- A. on the gateway: ad debug on
- B. on the gateway: ad query debug on
- C. on the gateway: pdp debug nac extended
- D. on the management: ad query debug extended
正解：C
質問 # 54
As a security administrator/engineer in your company, you have noticed that your HQ Check Point Security Management Server is not receiving logs from your HQ Check Point Gateway/Cluster.
To investigate this issue in the command line, you will need to verify which process is running?
- A. fwm
- B. fwd
- C. cpm
- D. cpd
正解：B
質問 # 55
Where will the usermode core files located?
- A. /var/log/dump/usermode
- B. $CPDIR/var/log/dump/usermode
- C. $FWDIR/var/log/dump/usermode
- D. /var/suroot
正解：A
質問 # 56
What is the best way to resolve an issue caused by a frozen process?
- A. Kill the process
- B. Restart the process
- C. Power off the machine
- D. Reboot the machine
正解：D
質問 # 57
Where do you enable log indexing on the SMS?
- A. SMS object under "General Properties"
- B. SMS object under "Logs"
- C. SMS object under "Advanced"
- D. SMS object under "Other"
正解：B
質問 # 58
What is the simplest and most efficient way to check all dropped packets in real time?
- A. tail -f $FWDIR/log/fw.log |grep drop in expert mode
- B. fw ctl zdebug + drop in expert mode
- C. Smartlog
- D. cat /dev/fw1/log in expert mode
正解：B
質問 # 59
PostgreSQL is a powerful, open source relational database management system. Check Point offers a command for viewing the database to interact with Postgres interactive shell. Which command do you need to enter the PostgreSQL interactive shell?
- A. psql_client postgres cpm
- B. psql_client cpm postgres
- C. mysql_client cpm postgres
- D. mysql -u root
正解：B
質問 # 60
What process monitors, terminates, and restarts critical Check Point processes as necessary?
- A. CPVVD
- B. FWD
- C. FWM
- D. CPM
正解：A
質問 # 61
What is the correct syntax to turn a VPN debug on and create new empty debug files?
- A. vpn kdebug on
- B. vpn debug truncon
- C. vpndebug trunc on
- D. vpn debuq trunkon
正解：B
質問 # 62
......
最新でリアルな156-587試験問題集解答：https://jp.fast2test.com/156-587-premium-file.html
156-587試験問題集でCheckPoint練習テスト問題：https://drive.google.com/open?id=1tPiGIh9b2modIqNiBHDJ1UQpbdaA47Dx