[Nov 30, 2024] Genuine 156-587 Exam Dumps Free Demo
Printable & Easy to Use CCTE 156-587 Dumps 100% Same Q&A In Your Real Exam
NEW QUESTION # 43
Your users have some issues connecting with Mobile Access VPN to your gateway. How can you debug the tunnel establishment?
- A. in the file $CVPNDIR/conf/httpd.conf change the line Loglevel .. To LogLevel debug and run cvpnrestart
- B. in the file $VPNDIR/conf/httpd.conf change the line Loglevel .. To LogLevel debug and run vpn restart
- C. run vpn debug truncon
- D. run fw ctl zdebug -m sslvpn all
Answer: A
NEW QUESTION # 44
Check Point Threat Prevention policies can contain multiple policy layers and each layer consists of its own Rule Base.
Which Threat Prevention daemon is used for Anti-virus?
- A. in.msd
- B. ctasd
- C. in.emaild
- D. in.emaild.mta
Answer: B
Explanation:
ctasd: This daemon is responsible for Threat Emulation, Anti-Bot, Application Control, and various other security features, including Anti-virus. From Check Point R80.10 onwards, Anti-virus functionality is integrated within ctasd.
NEW QUESTION # 45
Which of these packet processing components stores Rule Base matching state-related information?
- A. Classifiers
- B. Handlers
- C. Manager
- D. Observers
Answer: B
NEW QUESTION # 46
Which process is responsible for the generation of certificates?
- A. dbsync
- B. cpm
- C. fwm
- D. cpca
Answer: D
NEW QUESTION # 47
During firewall kernel debug with fw ctl zdebug you received less information that expected. You noticed that a lot of messages were lost since the time the debug was started. What should you do to resolve this issue?
- A. Increase debug buffer; Use fw ctl debug -buf 32768
- B. Increase debug buffer; Use fw ctl zdebug -buf 32768
- C. Redirect debug output to file; Use fw ctl debug -o ./debug.elg
- D. Redirect debug output to file; Use fw ctl zdebug -o ./debug.elg
Answer: A
NEW QUESTION # 48
You have just acquired new licenses for your Check Point security Gateway. You need to attach the new license.
What is the object in the Security Console where you can attach the license for a software blade?
- A. Security Blade
- B. Hardware Blade
- C. Software Blade
- D. Software Container
Answer: D
NEW QUESTION # 49
The management configuration stored in the Postgres database is partitioned into several relational database domains. What is the purpose of the Global Domain?
- A. This domain is used as the global database to track the changes made by multiple administrators on the same objects prior to publishing.
- B. Global Domains is used by the IPS software blade to map the IDs to the corresponding countries according to the IpToCountry.csv file.
- C. This domain is used as the global database for MDSM and contains global objects and policies.
- D. This domain is used as the global database to back up the objects referencing the corresponding object attributes from the System Domain.
Answer: C
NEW QUESTION # 50
In Mobile Access VPN, clientless access is done using a web browser. The primary communication path for these browser based connections is a process that allows numerous processes to utilize port 443 and redirects traffic to a designated port of the respective process.
Which daemon handles this?
- A. Connectra VPN Daemon (cvpnd)
- B. Mobile Access Daemon (MAD)
- C. HTTPS Inspection Daemon (HID)
- D. Multi-portal Daemon
Answer: D
NEW QUESTION # 51
The Check Point Firewall Kernel is the core component of the Gaia operating system and an integral part of traffic inspection process. There are two procedures available for debugging the firewall kernel. Which procedure/command is used for detailed troubleshooting and needs more resources?
- A. fw ctl zdebug
- B. fw ctl debug/kdebug
- C. fw debug/kdebug
- D. fw debug/kdebug ctl
Answer: B
NEW QUESTION # 52
An administrator receives reports about issues with log indexing and text searching regarding an existing Management Server. In trying to find a solution she wants to check if the process responsible for this feature is running correctly. What is true about the related process?
- A. fwssd crashes can affect therefore not show in the list
- B. cpd needs to be restarted manual to show in the list
- C. fwm manaqes this database after initialization of the 1CA
- D. solr is a child process of cpm
Answer: D
NEW QUESTION # 53
Which of the following is contained in the System Domain of the Postgres database?
- A. Saved queries for applications
- B. User modified configurations such as network objects
- C. Configuration data of log servers
- D. Trusted GUI clients
Answer: D
NEW QUESTION # 54
What does CMI stand for in relation to the Access Control Policy?
- A. Context Manipulation Interface
- B. Content Matching Infrastructure
- C. Context Management Infrastructure
- D. Content Management Interface
Answer: C
NEW QUESTION # 55
What is the name of the VPN kernel process?
- A. CVPND
- B. VPNK
- C. VPND
- D. FWK
Answer: C
NEW QUESTION # 56
That is the proper command for allowing the system to create core files?
- A. > set core-dump enable
> save config - B. service core-dump start
- C. $FWDIR/scripts/core-dump-enable.sh
- D. # set core-dump enable
# save config
Answer: A
NEW QUESTION # 57
Which of the following file is commonly associated with troubleshooting crashes on a system such as the Security Gateway?
- A. tcpdump
- B. core dump
- C. fw monitor
- D. CPMIL dump
Answer: B
NEW QUESTION # 58
What command(s) will turn off all vpn debug collection?
- A. fw ctl debug 0
- B. vpn debug off
- C. vpn debug off and vpn debug ikeoff
- D. vpn debug -a off
Answer: C
NEW QUESTION # 59
SmartEvent utilizes the Log Server, Correlation Unit and SmartEvent Server to aggregate logs and identify security events. The three main processes that govern these SmartEvent components are:
- A. eventiasv, eventiarp,eventiacu
- B. cpsemd, cpsead, and DBSync
- C. fwd, secu, sesrv
- D. cpcu, cplog, cpse
Answer: B
NEW QUESTION # 60
What is the most efficient way to read an IKEv2 Debug?
- A. any xml editor
- B. notepad++
- C. vi on the cl
- D. IKE view
Answer: D
Explanation:
https://support.checkpoint.com/results/sk/sk30994
NEW QUESTION # 61
The FileApp parser in the Content Awareness engine does not extract text from which of the following file types?
- A. PDF
- B. Microsoft Office .docx files
- C. Microsoft Office Excel files
- D. Microsoft Office Powerpoint files
Answer: A
NEW QUESTION # 62
The two procedures available for debugging in the firewall kernel are
i. fw ctl zdebug
ii. fw ctl debug/kdebug
Choose the correct statement explaining the differences in the two
- A. (i) is used on a Security Gateway, whereas (ii) is used on a Security Management Server
- B. (i) is used for general debugging, has a small buffer and is a quick way to set kernel debug flags to getan output via command line whereas (ii) is useful when there is a need for detailed debugging and requires additional steps to set the buffer and get an output via command line
- C. (i) is used to debug only issues related to dropping of traffic, however (ii) can be used for any firewall issue including NATing, clustering etc.
- D. (i) is used to debug the access control policy only, however (ii) can be used to debug a unified policy
Answer: B
NEW QUESTION # 63
What is NOT a benefit of the `fw ctl zdebug' command?
- A. Collect debug messages from the kernel
- B. Cannot be used to debug additional modules
- C. Automatically allocate a 1MB buffer
- D. Clean the buffer
Answer: B
NEW QUESTION # 64
......
156-587 Practice Test Give You First Time Success with 100% Money Back Guarantee!: https://www.testpassed.com/156-587-still-valid-exam.html
All Obstacles During 156-587 Exam Preparation with 156-587 Real Test Questions: https://drive.google.com/open?id=1DQA1I1Zl5tzNfisZCXQSzcYGnoVx1QaC