[2023] 156-585.pdf – Questions Answers PDF Sample Questions Reliable [Q48-Q72]

NO.48 What is connect about the Resource Advisor (RAD) service on the Security Gateways?

NO.49 Vanessa is reviewing ike.elg file to troubleshoot failed site-to-site VPN connection After sending Mam Mode Packet 5 the response from the peer is PAYLOAD-MALFORMED” What is the reason for failed VPN connection?

NO.50 What is the best way to resolve an issue caused by a frozen process?

NO.51 Your users have some issues connecting Mobile Access VPN to the gateway. How can you debug the tunnel establishment?

NO.52 Which Threat Prevention Daemon is the core Threat Emulation engine and responsible for emulation files and communications with Threat Cloud?

NO.53 Which of the following is a component of the Context Management Infrastructure used to collect signatures in user space from multiple sources, such as Application Control and IPS. and compiles them together into unified Pattern Matchers?

NO.54 Rules within the Threat Prevention policy use the Malware database and network objects. Which directory is used for the Malware database?

NO.55 What is the purpose of the Hardware Diagnostics Tool?

NO.56 Check Point Threat Prevention policies can contain multiple policy layers and each layer consists of its own Rule Base Which Threat Prevention daemon is used for Anti-virus?

NO.57 Which of the following is NOT a valid “fwaccel” parameter?

NO.58 Select the technology that does the following actions
– provides reassembly via streaming for TCP
– handles packet reordering and congestion
– handles payload overlap
– provides consistent stream of data to protocol parsers

NO.59 What file extension should be used with fw monitor to allow the output file to be imported and read in Wireshark?

NO.60 What acceleration mode utilizes multi-core processing to assist with traffic processing?

NO.61 John works for ABC Corporation.They have enabled CoreXL on their firewall John would like to identify the cores on which the SND runs and the cores on which the firewall instance is running. Which command should John run to view the CPU role allocation?

NO.62 You are trying to establish a VPN tunnel between two Security Gateways but fail. What initial steps will you make to troubleshoot the issue

NO.63 RAD is initiated when Application Control and URL Filtering blades are active on the Security Gateway What is the purpose of the following RAD configuration file SFWDIR/conf/rad_settings.C?

NO.64 What does SIM handle?

NO.65 the difference in debugging a S2S or C2S (using Check Point VPN Client) VPN?

NO.66 Which of the following is contained in the System Domain of the Postgres database?

NO.67 What is the name of the VPN kernel process?

NO.68 The customer is using Check Point appliances that were configured long ago by third-party administrators. Current policy includes different enabled IPS protections and Bypass Under Load function. Bypass Under Load is configured to disable IPS inspections of CPU and Memory usage is higher than 80%. The Customer reports that IPS protections are not working at all regardless of CPU and Memory usage.
What is the possible reason of such behavior?

NO.69 What is the simplest and most efficient way to check all dropped packets in real time?

NO.70 PostgreSQL is a powerful, open source relational database management system Check Point offers a command for viewing the database to interact with Postgres interactive shell Which command do you need to enter the PostgreSQL interactive shell?

NO.71 For TCP connections, when a packet arrives at the Firewall Kemel out of sequence or fragmented, which layer of IPS corrects this lo allow for proper inspection?

NO.72 What are some measures you can take to prevent IPS false positives?