2022年最新の156-585問題集にはCCTE認証済み試験問題と解答
実際に出ると確認された156-585試験問題集と解答で156-585無料更新
質問 17
the difference in debugging a S2S or C2S (using Check Point VPN Client) VPN?
- A. there is no difference
- B. the C2S VPN can not be debugged as it uses different protocols for the key exchange
- C. the C2S VPN uses a different VPN deamon and there a second VPN debug
- D. the C2S client uses Browser based SSL vpn and cant be debugged
正解: D
質問 18
What does SIM handle?
- A. OPSEC connects to SecureXL
- B. Hardware communication to the accelerator
- C. Accelerating packets
- D. FW kernel to SXL kernel hand off
正解: B
質問 19
Which command is used to write a kernel debug to a file?
- A. fw ctl kdebug -T -f > debug.txt
- B. fw ctl debug -T -f > debug.txt
- C. fw ctl debug -S -t > debug.txt
- D. fw ctl kdebug -T -l > debug.txt
正解: A
質問 20
What is the best way to resolve an issue caused by a frozen process?
- A. Restart the process
- B. Power off the machine
- C. Reboot the machine
- D. Kill the process
正解: A
質問 21
What is NOT a benefit of the fw ctl zdebug command?
- A. Cannot be used to debug additional modules
- B. Collect debug messages from the kernel
- C. Clean the buffer
- D. Automatically allocate a 1MB buffer
正解: A
質問 22
The Check Point Firewall Kernel is the core component of the Gala operating system and an integral part of traffic inspection process. There are two procedures available for debugging the firewall kernel. Which procedure/command is used for detailed troubleshooting and needs more resources?
- A. fw debug/kdebug
- B. fw debug/kdebug ctl
- C. fw ctl zdebug
- D. fw ctl debug/kdebug
正解: C
質問 23
An administrator receives reports about issues with log indexing and text searching regarding an existing Management Server. In trying to find a solution she wants to check if the process responsible for this feature is running correctly. What is true about the related process?
- A. fwm manages this database after initialization of the ICA
- B. fwssd crashes can affect therefore not show in the list
- C. cpd needs to be restarted manual to show in the list
- D. solr is a child process of cpm
正解: D
質問 24
What is the correct syntax to turn a VPN debug on and create new empty debug files?
- A. vpndebug trunc on
- B. vpn debug truncon
- C. vpn debug trunkon
- D. vpn kdebug on
正解: C
質問 25
Which situation triggers an IPS bypass under load on a 24-core Check Point appliance?
- A. any of the CPU cores is above the threshold for more than 10 seconds
- B. all CPU core most be above the threshold for more than 10 seconds
- C. a single CPU core must be above the threshold for more than 10 seconds, but is must be the same core during this time
- D. the average cpu utilization over all cores must be above the threshold for 1 second
正解: A
質問 26
To check the current status of hyper-threading, which command would you execute in expert mode?
- A. cat /proc/hypert_status
- B. cat /proc/hypert_stat
- C. cat /proc/smt_status
- D. cat /proc/smt_stat
正解: C
質問 27
What is the kernel process for Content Awareness that collects the data from the contexts received from the CMI and decides if the file is matched by a data type?
- A. cntawmod
- B. cntmgr
- C. dlpda
- D. dlpu
正解: A
質問 28
You have configured IPS Bypass Under Load function with additional kernel parameters ids_tolerance_no_stress=15 and ids_tolerance_stress-15 For configuration you used the *fw ctl set' command After reboot you noticed that these parameters returned to their default values What do you need to do to make this configuration work immediately and stay permanent?
- A. Set these parameters again with "fw ctl set" and save configuration with "save config"
- B. Use script $FWDIR/bin IpsSetBypass.sh to set these parameters
- C. Set these parameters again with "fw ctl set" and edit appropriate parameters in $FWDIR/boot/modules/ fwkern.conf
- D. Edit appropriate parameters in $FWDIR/boot/modules/fwkern.conf
正解: C
解説:
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk62848&partition=Advanced&product=IPS
質問 29
Which Daemon should be debugged for HTTPS Inspection related issues?
- A. HTTPD
- B. FWD
- C. VPND
- D. WSTLSO
正解: D
質問 30
In Security Management High Availability, if the primary and secondary managements, running the same version of R80.x, are in a state of 'Collision', how can this be resolved?
- A. Run the command 'fw send synch force' on the primary server and 'fw get sync quiet' on the secondary server
- B. Administrator should manually synchronize the servers using SmartConsole
- C. The Collision state does not happen in R80.x as the synchronizing automatically on every publish action
- D. Reset the SIC of the secondary management server
正解: B
質問 31
Rules within the Threat Prevention policy use the Malware database and network objects. Which directory is used for the Malware database?
- A. $FWDlR/conf/install_firewall_imp/ANTIMALWARE/conf/
- B. $FWDlR/log/install_manager_tmp/ANTIMALWARBlog?
- C. $CPDIR/conf/install_manager_lmp/ANTIMALWARE/conf/
- D. $FWDIR/conf/install_manager_tmp/ANTIMALWARE/conf/
正解: D
質問 32
John works for ABC Corporation.They have enabled CoreXL on their firewall John would like to identify the cores on which the SND runs and the cores on which the firewall instance is running. Which command should John run to view the CPU role allocation?
- A. fw ctl cores
- B. fw ctl affinity -v
- C. fwaccel stat -I
- D. fw ctl affinity -I
正解: D
質問 33
Which process is responsible for the generation of certificates?
- A. dbsync
- B. cpca
- C. fwm
- D. cpm
正解: B
質問 34
You are running R80.XX on an open server and you see a high CPU utilization on your 12 CPU cores You now want to enable Hyperthreading to get more cores to gain some performance. What is the correct way to achieve this?
- A. just turn on HAT in the bios of the server and after it has booted enable it in cpconfig
- B. Hyperthreading is not supported on open servers, on on Check Point Appliances
- C. in dish run set HAT on
- D. just turn on HAT in the bios of the server and boot it
正解: C
質問 35
Which of the following is a component of the Context Management Infrastructure used to collect signatures in user space from multiple sources, such as Application Control and IPS. and compiles them together into unified Pattern Matchers?
- A. CMI Loader
- B. cpas
- C. PSL - Passive Signature Loader
- D. Context Loader
正解: A
質問 36
How can you increase the ring buffer size to 1024 descriptors?
- A. echo rx_ringsize=1024>>/etc/sysconfig/sysctl.conf
- B. fw ctl int rx_ringsize 1024
- C. dbedit>modify properties firewall_properties rx_ringsize 1024
- D. set interface eth0 rx-ringsize 1024
正解: D
質問 37
......
実際問題を使って156-585問題集で100%無料156-585試験問題集：https://www.jpntest.com/shiken/156-585-mondaishu