Check Point 156-587 Dumps Updated to V9.02: Offering 109 Practice Exam Questions and Answers to Help You Prepare for Your CCTE Exam

1. You run a free-command on a gateway and notice that the Swap column is not zero Choose the best answer

A. Utilization of ram is high and swap file had to be used

B. Swap file is used regularly because RAM memory is reserved for management traffic

C. Swap memory is used for heavy connections when RAM memory is full

D. Its ole Swap is used to increase performance

2. You modified kernel parameters and after rebooting the gateway, a lot of production traffic gets dropped and the gateway acts strangely.

What should you do"?

3. What process monitors terminates, and restarts critical Check Point processes as necessary?

4. When dealing with monolithic operating systems such as Gaia where are system calls initiated from to achieve a required system level function?

5. Which of the following commands can be used to see the list of processes monitored by the Watch Dog process?

6. What tool would you run to diagnose logging and indexing?

7. You found out that $FWDIR/Iog/fw.log is constantly growing in size at a Security Gateway, what is the reason?

8. What is the best way to resolve an issue caused by a frozen process?

A. Power off the machine

B. Restart the process

C. Reboot the machine

D. Kill the process

9. Which of the following file is commonly associated with troubleshooting crashes on a system such as the Security Gateway?

A. tcpdump

B. core dump

C. fw monitor

D. CPMIL dump

10. When a User Mode process suddenly crashes, it may create a core dump file.

Which of the following information is available in the core dump and may be used to identify the root cause of the crash?

i. Program Counter

ii. Stack Pointer

iii. Memory management information

iv. Other Processor and OS flags / information

11. Where will the usermode core files located?

12. What is the function of the Core Dump Manager utility?

13. What is the proper command for allowing the system to create core files?

14. When a user space process or program suddenly crashes, what type of file is created for analysis

15. You receive reports from multiple users that they cannot browse Upon further discovery you identify that Identity Awareness cannot identify the users properly and apply the configured Access Roles.

What commands you can use to troubleshoot all identity collectors and identity providers from the command line?

A. on the gateway: pdp debug set IDC all IDP all

B. on the gateway: pdp debug set AD all and IDC all

C. on the management: pdp debug on IDC all

D. on the management: pdp debug set all

16. When a User process or program suddenly crashes, a core dump is often used to examine the problem.

Which command is used to enable the core-dumping via GAIA clish?

17. What is NOT a benefit of the ‘fw ctl zdebug’ command?

18. When debugging is enabled on firewall kernel module using the fw ctl debug' command with required options, many debug messages are provided by the kernel that help the administrator to identify Issues.

Which of the following is true about these debug messages generated by the kernel module?

19. During firewall kernel debug with fw ctl zdebug you received less information that expected. You noticed that a lot of messages were lost since the time the debug was started.

What should you do to

resolve this issue?

20. You need to run a kernel debug over a longer period of time as the problem occurs only once or twice a week. Therefore you need to add a timestamp to the kernel debug and write the output to a file but you cant afford to fill up all the remaining disk space and you only have 10 GB free for saving the debugs.

What is the correct syntax for this?

21. What command is usually used for general firewall kernel debugging and what is the size of the buffer that is automatically enabled when using the command?

22. The Check Point Firewall Kernel is the core component of the Gaia operating system and an integral part of the traffic inspection process. There are two procedures available for debugging the firewall kernel.

Which procedure/command is used for troubleshooting packet drops and other kernel activities while using minimal resources (1 MB buffer)?

23. You need to run a kernel debug over a longer period of time as the problem occurs only once or twice a week Therefore you need to add a timestamp to the kernel debug and write the output to a file.

What is the correct syntax for this?

24. You are seeing output from the previous kernel debug.

What command should you use to avoid that?

25. The Check Point Firewall Kernel is the core component of the Gaia operating system and an integral part of traffic inspection process. There are two procedures available for debugging the firewall kernel.

Which procedure/command is used for detailed troubleshooting and needs more resources?

26. What is the benefit of fw ctl debug over fw ctl zdebug?

27. What is the buffer size set by the fw ctl zdebug command?

28. Which command is used to write a kernel debug to a file?

29. What is the shorthand reference for a classification object?

30. Which of the following is a component of the Context Management Infrastructure used to collect signatures in user space from multiple sources such as Application Control and IPS. and compiles them together into unified Pattern Matchers?

31. What is the correct syntax to set all debug flags for Unified Policy related issues?

32. What component is NOT part of Unified policy manager?

33. The FileApp parser in the Content Awareness engine does not extract text from which of the following file types?

34. The packet processing infrastructure consists of 4 components.

Which component contains the CLOB, the object that contains information about the packet that is needed to make security decisions?

35. How can you start debug of the Unified Policy with all possible flags turned on?

36. In Check Point's Packet Processing Infrastructure what is the role of Observers?

37. Check Point Access Control Daemons contains several daemons for Software Blades and features.

Which Daemon is used for Application & Control URL Filtering?

38. Packet processing infrastructure consists of the following components EXCEPT:

39. What does CMI stand for in relation to the Access Control Policy?

40. What is the kernel process for Content Awareness that collects the data from the contexts received from the CMI and decides if the file is matched by a data type?