Vivid CheckPoint 156-585 Exam Dumps Online

NEW QUESTION 1
What is the kernel process for Content Awareness that collects the data from the contexts received from the CMI and decides if the file is matched by a data type?

• A. dlpda
• B. dlpu
• C. cntmgr
• D. cntawmod

Answer: D

NEW QUESTION 2
What are the main components of Check Point's Security Management architecture?

• A. Management server, management database, log server, automation server
• B. Management server, Security Gatewa
• C. Multi-Domain Server, SmartEvent Server
• D. Management Serve
• E. Log Serve
• F. LDAP Server, Web Server
• G. Management server Log server, Gateway serve
• H. Security server

Answer: A

NEW QUESTION 3
What is the correct syntax to set all debug flags for Unified Policy related issues?

• A. fw ctl debug -m UP all
• B. fw ctl debug -m up all
• C. fw ctl kdebug -m UP all
• D. fw ctl debug -m fw all

Answer: A

NEW QUESTION 4
What components make up the Context Management Infrastructure?

• A. CMI Loader and Pattern Matcher
• B. CPMI and FW Loader
• C. CPX and FWM
• D. CPM and SOLR

Answer: A

NEW QUESTION 5
What is the most efficient way to view large fw monitor captures and run filters on the file?

• A. wireshark
• B. CLISH
• C. CLI
• D. snoop

Answer: A

NEW QUESTION 6
Which situation triggers an IPS bypass under load on a 24-core Check Point appliance?

• A. any of the CPU cores is above the threshold for more than 10 seconds
• B. all CPU core most be above the threshold for more than 10 seconds
• C. a single CPU core must be above the threshold for more than 10 seconds, but is must be the same core during this time
• D. the average cpu utilization over all cores must be above the threshold for 1 second

Answer: A

NEW QUESTION 7
URL Filtering is an essential part of Web Security in the Gateway. For the Security Gateway to perform a URL lookup when a client makes a URL request, where is the sync-request forwarded from if a sync-request is required''

• A. RAD Kernel Space
• B. URLF Kernel Client
• C. URLF Online Service
• D. RAD User Space

Answer: B

NEW QUESTION 8
John has renewed his NGTX License but he gets an error (contract for Anti-Bot expired). He wants to check the subscription status on the CU of the gateway, what command can he use for this?

• A. cpstat antimalware -f subscription_status
• B. fw monitor license status
• C. fwm lie print
• D. show license status

Answer: A

NEW QUESTION 9
Which command can be run in Expert mode lo verify the core dump settings?

• A. grep cdm /config/db/coredump
• B. grep cdm /config/db/initial
• C. grep SFWDlR/config/db/initial
• D. cat /etc/sysconfig/coredump/cdm conf

Answer: C

NEW QUESTION 10
Which command do you need to execute to insert fw monitor after TCP streaming (out) in the outbound chain using absolute position? Given the chain was 1ffffe0, choose the correct answer.

• A. fw monitor –po -0x1ffffe0
• B. fw monitor –p0 ox1ffffe0
• C. fw monitor –po 1ffffe0
• D. fw monitor –p0 –ox1ffffe0

Answer: A

Explanation:
https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/CP_R80.40_PerformanceTuning_AdminG

NEW QUESTION 11
Rules within the Threat Prevention policy use the Malware database and network objects. Which directory is used for the Malware database?

• A. $FWDIR/conf/install_manager_tmp/ANTIMALWARE/conf/
• B. $CPDIR/conf/install_manager_lmp/ANTIMALWARE/conf/
• C. $FWDlR/conf/install_firewall_imp/ANTIMALWARE/conf/
• D. $FWDlR/log/install_manager_tmp/ANTIMALWARBlog?

Answer: A

NEW QUESTION 12
Which daemon governs the Mobile Access VPN blade and works with VPND to create Mobile Access VPN connections? It also handles interactions between HTTPS and the Multi-Portal Daemon.

• A. Connectra VPN Daemon - cvpnd
• B. Mobile Access Daemon - MAD
• C. mvpnd
• D. SSL VPN Daemon - sslvpnd

Answer: A

NEW QUESTION 13
What is the simplest and most efficient way to check all dropped packets in real time?

• A. fw ctl zdebug * drop in expert mode
• B. Smartlog
• C. cat /dev/fwTlog in expert mode
• D. tail -f SFWDIR/log/fw log |grep drop in expert mode

Answer: D

NEW QUESTION 14
What are four main database domains?

• A. System, Global, Log, Event
• B. System, User, Host, Network
• C. Local, Global, User, VPN
• D. System, User, Global, Log

Answer: D

NEW QUESTION 15
Which Daemon should be debugged for HTTPS Inspection related issues?

• A. FWD
• B. HTTPD
• C. WSTLSO
• D. VPND

Answer: C

NEW QUESTION 16
What is the purpose of the Hardware Diagnostics Tool?

• A. Verifying that Check Point Appliance hardware is functioning correctly
• B. Verifying the Security Management Server hardware is functioning correctly
• C. Verifying that Security Gateway hardware is functioning correctly
• D. Verifying that Check Point Appliance hardware is actually broken

Answer: B

NEW QUESTION 17
......