Free CCTE 156-585 Ultimate Study Guide (Updated 116 Questions)
Get to the Top with 156-585 Practice Exam Questions
CheckPoint 156-585 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 6 |
|
| Topic 7 |
|
| Topic 8 |
|
NEW QUESTION 67
Where do Protocol parsers register themselves for IPS?
- A. Passive Streaming Library
- B. Other handlers register to Protocol parser
- C. Context Management Infrastructure
- D. Protections database
Answer: A
NEW QUESTION 68
What is the main SecureXL database for trackingthe acceleration status of traffic?
- A. cphwd_db
- B. cphwd_dev_conn_table
- C. cphwd_dev_identity_table
- D. cphwd_tmp1
Answer: C
NEW QUESTION 69
What file extension should be used with fw monitor to allow the output file to be imported and read in Wireshark?
- A. .tgz
- B. .exe
- C. .pcap
- D. .cap
Answer: D
NEW QUESTION 70
To check the current status of hyper-threading, which command would you execute in expert mode?
- A. cat /proc/smt_status
- B. cat /proc/hypert_status
- C. cat /proc/hypert_stat
- D. cat /proc/smt_stat
Answer: A
NEW QUESTION 71
You are running R80.XX on an open server and you see a high CPU utilization on your 12 CPU cores You now want to enable Hyperthreading to get more cores to gain some performance. What is the correct way to achieve this?
- A. just turn on HAT in the bios of the server and after it has booted enable it in cpconfig
- B. just turn on HAT in the bios of the server and boot it
- C. Hyperthreading is not supported on open servers, on on Check Point Appliances
- D. in dish run set HAT on
Answer: D
NEW QUESTION 72
You are upgrading your NOC Firewall (on a Check Point Appliance) from R77 to R80 30 but you did not touch thesecuritypolicy After the upgrade you can't connect to the new R80 30 SmartConsole of the upgraded Firewall anymore What is a possible reason for this?
- A. the upgrade process changed the interfaces and IP adresses and you have to switch cables
- B. the license became invalig and the firewall does not start anymore
- C. new new console port is 19009 and a access rule ts missing
- D. the IPS System on the new R80.30 Version prohibits direct Smartconsole access to a standalone firewall
Answer: D
NEW QUESTION 73
Which command is most useful for debugging the fwaccel module?
- A. fw debug
- B. fwaccel dbg
- C. fw zdebug
- D. securexl debug
Answer: B
NEW QUESTION 74
What does SIM handle?
- A. Hardware communication to the accelerator
- B. FW kernel to SXL kernel hand off
- C. OPSEC connects to SecureXL
- D. Accelerating packets
Answer: C
NEW QUESTION 75
During firewall kernel debug with fw ctl zdebug you received less information than expected. You noticed that a lot of messages were lost since the time the debug was started. What should you do to resolve this issue?
- A. Increase debug buffer; Use fw ctl zdebug -buf 32768
- B. Increase debug buffer; Use fw ctl debug -buf 32768
- C. Redirect debug output to file; Use fw ctl zdebug -o ./debug.elg
- D. Redirect debug output to file; Use fw ctl debug -o ./debug.elg
Answer: B
NEW QUESTION 76
What acceleration mode utilizes multi-core processing to assist with traffic processing?
- A. CoreXL
- B. Traffic Warping
- C. HyperThreading
- D. SecureXL
Answer: C
NEW QUESTION 77
What file contains the RAD proxy settings?
- A. rad_scheme.C
- B. rad_services.C
- C. rad_control.C
- D. rad_settings.C
Answer: D
NEW QUESTION 78
What is the main SecureXL database for tracking acceleration status of traffic?
- A. cphwd_db
- B. cphwd_dev_conn_table
- C. cphwd_dev_identity_table
- D. cphwd_tmp1
Answer: D
NEW QUESTION 79
Which one of the following is NOT considered a Solr core partition:
- A. CPM_Gtobal_R
- B. CPM_0_Revisions
- C. CPM_0_Disabled
- D. CPM_Global_A
Answer: C
NEW QUESTION 80
VPN issues may result from misconfiguration, communication failure, or incompatible default configurations between peers Which basic command syntax needs to be used for troubleshooting Site-to-Site VPN Issues?
- A. vpn truncon debug
- B. vpn debug truncon
- C. fw debug truncon
- D. cp debug truncon
Answer: B
NEW QUESTION 81
How can you increase the ring buffer size to 1024 descriptors?
- A. dbedit>modify properties firewall_properties rx_ringsize 1024
- B. fw ctl int rx_ringsize 1024
- C. set interface eth0 rx-ringsize 1024
- D. echo rx_ringsize=1024>>/etc/sysconfig/sysctl.conf
Answer: C
NEW QUESTION 82
Troubleshooting issues with Mobile Access requires the following:
- A. Debug logs of FWD captured with the command - 'fw debug fwd on TDERROR_MOBILE_ACCESS=5'
- B. Standard VPN debugs and packet captures on Security Gateway, debugs of "cvpnd' process on Security Management
- C. 'ma_vpnd' process on Secunty Gateway
- D. Standard VPN debugs, packet captures, and debugs of cvpnd' process on Security Gateway
Answer: D
NEW QUESTION 83
What table does the command "fwaccel conns" pull information from?
- A. SecureXLCon
- B. sxl_connections
- C. cphwd_db
- D. fwxl_conns
Answer: D
NEW QUESTION 84
You are running R80.XX on an open server and you see a high CPU utilization on your 12 CPU cores You now want to enable Hyperthreading to get more cores to gain some performance. What is the correct way to achieve this?
- A. just turn on HAT in the bios of the server and after it has booted enable it in cpconfig
- B. just turn on HAT in the bios of the server and boot it
- C. Hyperthreading is not supported on open servers, on on Check Point Appliances
- D. in dish run set HAT on
Answer: C
NEW QUESTION 85
......
Pass CheckPoint 156-585 exam - questions - convert Tets Engine to PDF: https://quizguide.actualcollection.com/156-585-exam-questions.html