156-587 CheckPoint Exam Questions and Free Practice Test

Question 13

Your users have some issues connecting with Mobile Access VPN to your gateway. How can you debug the tunnel establishment?

A. run vpn debug truncon

B. in the file $VPNDIR/conf/httpd conf change the line Loglevel To LogLevel debug and run vpn restart

C. in the file SCVPNDIR/conf/httpd conf change the line Loglevel To LogLevel debug and run cvpnrestart

D. run fw ctl zdebug -m sslvpn all

Correct Answer:C

Question 14

Which process is responsible for the generation of certificates?

A. dbsync

B. cpm

C. fwm

D. cpca

Correct Answer:D

Question 15

RAD is initiated when Application Control and URL Filtering blades are active on the Security Gateway. What is the purpose of the following RAD configuration file
$FWDIR/conf/rad_settings.C?

A. This file contains the location information for Application Control and/or URL Filtering entitlements

B. This file contains the information on how the Security Gateway reaches the Security Management Server's RAD service for Application Control and URL Filtering

C. This file contains RAD proxy settings

D. This file contains all the host name settings for the online application detection engine

Correct Answer:C

Question 16

In the Security Management Architecture, what port and process does SmartConsole use to communicate with the Security Management Server?

A. CPM and 18190

B. FWM and 19009

C. CPM and 19009

D. CPM, 19009, and 18191

Correct Answer:A

Question 17

The Check Point Firewall Kernel is the core component of the Gaia operating system and an integral part of the traffic inspection process. There are two procedures available for debugging the firewall kernel. Which procedure/command is used for troubleshooting packet drops and other kernel activities while using minimal resources (1 MB buffer)?

A. fw ctl zdebug

B. fwk ell debug

C. fw debug ctl

D. fw ctl debug/kdebug

Correct Answer:A

Question 18

What does CMI stand for in relation to the Access Control Policy?

A. Context Manipulation Interface

B. Context Management Infrastructure

C. Content Management Interface

D. Content Matching Infrastructure

Correct Answer:B

START 156-587 EXAM