Where will the usermode core files located?

Where will the usermode core files located?A . /var/log/dump/usermodeB . /var/surootC . $FWDIR/var/log/dump/usermodeD . $CPDIR/var/log/dump/usermodeView AnswerAnswer: A Explanation: Reference: https://supportcenter.checkpoint.com/supportcenter/portal? eventSubmit_doGoviewsolutiondetails=&solutionid=sk92764

January 14, 2019 No Comments READ MORE +

Which type of SecureXL templates is enabled by default on Security Gateways?

Which type of SecureXL templates is enabled by default on Security Gateways?A . AcceptB . DropC . NATD . VPNView AnswerAnswer: A

January 13, 2019 No Comments READ MORE +

You are working with multiple Security Gateways enforcing an extensive number of rules. To simplify security administration, which action would you choose?

You are working with multiple Security Gateways enforcing an extensive number of rules. To simplify security administration, which action would you choose?A . Eliminate all possible contradictory rules such as the Stealth or Cleanup rulesB . Create a separate Security Policy package for each remote Security GatewayC . Create network...

January 5, 2019 No Comments READ MORE +

Where does the translation occur with Hide NAT?

Where does the translation occur with Hide NAT?A . The destination translation occurs at the client sideB . The source translation occurs at the server sideC . The source translation occurs at the client sideD . The destination translation occurs at the server sideView AnswerAnswer: B

January 3, 2019 No Comments READ MORE +

What command would you run to use static affinity to balance the interfaces between the SND cores?

You verified that Performance Pack is disabled and need to distribute the affinity interfaces. What command would you run to use static affinity to balance the interfaces between the SND cores?A . cpmq setB . sim affinity -sC . fw ctl affinity -a -l -vD . fw ctl affinity -sView...

January 1, 2019 No Comments READ MORE +

What do you do to permanently enable IPv6 protocol?

You issued the command “set ipv6-state on” in order to enable IPv6 protocol on a Security Gateway. The command was executed successfully. After reboot you notice that IPv6 protocol is not enabled. What do you do to permanently enable IPv6 protocol?A . Issue “set ipv6-state on” again; Save configuration and...

December 17, 2018 No Comments READ MORE +

Which is the correct “fw monitor” syntax for creating a capture file for loading it into WireShark?

Which is the correct “fw monitor” syntax for creating a capture file for loading it into WireShark?A . fw monitor Ce “accept <FILTER EXPRESSION>; “>> Output.capB . This cannot be accomplished as it is not supported with R80.10C . fw monitor Ce “accept <FILTER EXPRESSION>;” Cfile Output.capD . fw monitor...

December 12, 2018 No Comments READ MORE +

What file extension should be used with fw monitor to allow the output file to be imported and read in Wireshark?

What file extension should be used with fw monitor to allow the output file to be imported and read in Wireshark?A . .capB . .exeC . .tgzD . .pcapView AnswerAnswer: A

December 1, 2018 No Comments READ MORE +

What does the command “vpn shell tunnels delete all ike” do?

What does the command “vpn shell tunnels delete all ike” do?A . Delete only outbound_SPI tablesB . Deletes all IKE and IPSEC SA’sC . Deletes all IKE configuration on the GatewayD . Deletes all IKE SA’sView AnswerAnswer: D

November 22, 2018 No Comments READ MORE +

Which one of following commands should you run to display HTTPS packet content together with kernel debug?

Which one of following commands should you run to display HTTPS packet content together with kernel debug?A . fw ctl get int https_inspection_show_decrypted_data_in_debug=1 fw ctl get int ssl_inspection_extra_debug=1B . fw set int https_inspection_get_encrypted_data_in_debug 1 fw set int https_inspection_show_debug 1C . fw ctl set int https_inspection_show_decrypted_data_in_debug 1 fw ctl set int...

November 20, 2018 No Comments READ MORE +