156-585 Online Training Archives

There are many online sites provide Check Point 156-585 exam training resources. But Exam4Training provide you the most actual Check Point 156-585 Check Point Certified Troubleshooting Expert Online Training. Exam4Training have professional personnel of certification experts, technical staff, and comprehensive language masters. They are always studying the latest CCTE 156-585 exam. Therefore, if you want to pass the 156-585 Check Point Certified Troubleshooting Expert examination, please Login Exam4Training website.

Page 1 of 10

1. What command is used to find out which port Multi-Portal has assigned to the Mobile Access Portal?

mpclient getdata sslvpn

netstat -nap | grep mobile

mpclient getdata mobi

netstat getdata sslvpn

2. What is the simplest and most efficient way to check all dropped packets in real time?

fw ctl zdebug * drop in expert mode

Smartlog

cat /dev/fwTlog in expert mode

tail -f SFWDIR/log/fw log |grep drop in expert mode

3. What table does the command "fwaccel conns" pull information from?

fwxl_conns

SecureXLCon

cphwd_db

sxl_connections

4. What is the kernel process for Content Awareness that collects the data from the contexts received from the CMI and decides if the file is matched by a data type?

dlpda

dlpu

cntmgr

cntawmod

5. Where do Protocol parsers register themselves for IPS?

Passive Streaming Library

Other handlers register to Protocol parser

Protections database

Context Management Infrastructure

6. Which command do you need to execute to insert fw monitor after TCP streaming (out) in the outbound chain using absolute position? Given the chain was 1ffffe0, choose the correct answer.

fw monitor Cpo -0x1ffffe0

fw monitor Cp0 ox1ffffe0

fw monitor Cpo 1ffffe0

fw monitor Cp0 Cox1ffffe0

7. What are the four ways to insert an FW Monitor into the firewall kernel chain?

Relative position using location, relative position using alias, absolute position, all positions

Absolute position using location, absolute position using alias, relative position, all positions

Absolute position using location, relative position using alias, general position, all positions

Relative position using geolocation relative position using inertial navigation, absolute position all positions

8. Check Point's PostgreSQL is partitioned into several relational database domains.

Which domain contains network objects and security policies?

User Domain

System Domain

Global Domain

Log Domain

9. During firewall kernel debug with fw ctl zdebug you received less information than expected. You noticed that a lot of messages were lost since the time the debug was started.

What should you do to resolve this issue?

Increase debug buffer; Use fw ctl debug Cbuf 32768

Redirect debug output to file; Use fw ctl zdebug Co ./debug.elg

Increase debug buffer; Use fw ctl zdebug Cbuf 32768

Redirect debug output to file; Use fw ctl debug Co ./debug.elg

10. What command sets a specific interface as not accelerated?

noaccel-s<interface1>

fwaccel exempt state <interface1>

nonaccel -s <interface1>

fwaccel -n <intetface1 >

Page 2 of 10

11. Which Threat Prevention daemon is the core Threat Emulator, engine and responsible for emulation files and communications with Threat Cloud?

ctasd

inmsd

ted

scrub

12. The management configuration stored in the Postgres database is partitioned into several relational database Domains, like - System, User, Global and Log Domains. The User Domain stores the network objects and security policies.

Which of the following is stored in the Log Domain?

Configuration data of Log Servers and saved queries for applications

Active Logs received from Security Gateways and Management Servers

Active and past logs received from Gateways and Servers

Log Domain is not stored in Postgres database, it is part of Solr indexer only

13. Which process is responsible for the generation of certificates?

cpm

cpca

dbsync

fwm

14. the difference in debugging a S2S or C2S (using Check Point VPN Client) VPN?

there is no difference

the C2S VPN uses a different VPN daemon and there a second VPN debug

the C2S VPN can not be debugged as it uses different protocols for the key exchange

the C2S client uses Browser based SSL vpn and can’t be debugged

15. The two procedures available for debugging in the firewall kernel are

i fw ctl zdebug

ii fw ctl debug/kdebug

Choose the correct statement explaining the differences in the two

(i) Is used for general debugging, has a small buffer and is a quick way to set kernel debug flags to get an output via command line whereas (11) is useful when there is a need for detailed debugging and requires additional steps to set the buffer and get an output via command line

(i) is used to debug the access control policy only, however (n) can be used to debug a unified policy

(i) is used to debug only issues related to dropping of traffic, however (n) can be used for any firewall issue including NATing, clustering etc.

(i) is used on a Security Gateway, whereas (11) is used on a Security Management Server

16. When a User Mode process suddenly crashes it may create a core dump file.

Which of the following information is available in the core dump and may be used to identify the root cause of the crash?

i Program Counter

ii Stack Pointer

ii. Memory management information

iv Other Processor and OS flags / information

i, ii, lii and iv

i and n only

iii and iv only

D Only iii

17. What is the buffer size set by the fw ctl zdebug command?

1 MB

1 GB

8MB

8GB

18. You have configured IPS Bypass Under Load function with additional kernel parameters ids_tolerance_no_stress=15 and ids_tolerance_stress-15 For configuration you used the *fw ctl set' command After reboot you noticed that these parameters returned to their default values.

What do you need to do to make this configuration work immediately and stay permanent?

Set these parameters again with “fw ctl set” and edit appropriate parameters in $FWDIR/boot/modules/ fwkern.conf

Use script $FWDIR/bin IpsSetBypass.sh to set these parameters

Set these parameters again with “fw ctl set” and save configuration with “save config”

Edit appropriate parameters in $FWDIR/boot/modules/fwkern.conf

19. What are some measures you can take to prevent IPS false positives?

Exclude problematic services from being protected by IPS (sip, H 323, etc )

Use IPS only in Detect mode

Use Recommended IPS profile

Capture packets. Update the IPS database, and Back up custom IPS files

20. What is the function of the Core Dump Manager utility?

To generate a new core dump for analysis

To limit the number of core dump files per process as well as the total amount of disk space used by core files

To determine which process is slowing down the system

To send crash information to an external analyzer

Page 3 of 10

21. John works for ABC Corporation. They have enabled CoreXL on their firewall John would like to identify the cores on which the SND runs and the cores on which the firewall instance is running.

Which command should John run to view the CPU role allocation?

fw ctl affinity -v

fwaccel stat -I

fw ctl affinity -I

fw ctl cores

22. Which of the following daemons is used for Threat Extraction?

scrubd

extractd

tex

tedex

23. URL Filtering is an essential part of Web Security in the Gateway.

For the Security Gateway to perform a URL lookup when a client makes a URL request, where is the sync-request forwarded from if a sync-request is required''

RAD Kernel Space

URLF Kernel Client

URLF Online Service

RAD User Space

24. You are upgrading your NOC Firewall (on a Check Point Appliance) from R77 to R80 30 but you did not touch the security policy After the upgrade you can't connect to the new R80 30 SmartConsole of the upgraded Firewall anymore.

What is a possible reason for this?

new new console port is 19009 and a access rule ts missing

the license became invalig and the firewall does not start anymore

the upgrade process changed the interfaces and IP adresses and you have to switch cables

the IPS System on the new R80.30 Version prohibits direct Smartconsole access to a standalone firewall

25. You are running R80.XX on an open server and you see a high CPU utilization on your 12 CPU cores You now want to enable Hyperthreading to get more cores to gain some performance.

What is the correct way to achieve this?

Hyperthreading is not supported on open servers, on on Check Point Appliances

just turn on HAT in the bios of the server and boot it

just turn on HAT in the bios of the server and after it has booted enable it in cpconfig

in dish run set HAT on

26. Where will the usermode core files be located?

/var/log/dump/usermode

/var/suroot

SFWDlR/var'log/dump/usermode

SCPDIR/var/log/dump/usermode

27. When running a debug with fw monitor, which parameter will create a more verbose output?

-i

-0

-d

28. PostgreSQL is a powerful, open source relational database management system Check Point offers a command for viewing the database to interact with Postgres interactive shell

Which command do you need to enter the PostgreSQL interactive shell?

psql_client cpm postgres

mysql_client cpm postgres

psql_c!ieni postgres cpm

mysql -u root

29. Check Point Access Control Daemons contains several daemons for Software Blades and features.

Which Daemon is used for Application & Control URL Filtering?

rad

cprad

pepd

pdpd

30. Your fwm constantly crashes and is restarted by the watchdog. You can't find any coredumps related to this process, so you need to check If coredumps are enabled at all.

How can you achieve that?

in dish run show core-dump status

in expert mode run show core-dump status

in dish run set core-dump status

in dish run show coredumb status

Page 4 of 10

31. Which of the following is NOT a valid "fwaccel" parameter?

stat

stats

templates

packets

32. Troubleshooting issues with Mobile Access requires the following:

Standard VPN debugs, packet captures, and debugs of cvpnd' process on Security Gateway

Standard VPN debugs and packet captures on Security Gateway, debugs of "cvpnd' process on Security Management

'ma_vpnd' process on Secunty Gateway

Debug logs of FWD captured with the command - 'fw debug fwd on TDERROR_MOBILE_ACCESS=5'

33. After kernel debug with "fw ctl debug" you received a huge amount of information It was saved in a very large file that is difficult to open and analyze with standard text editors Suggest a solution to solve this issue.

Use "fw ctl zdebug' because of 1024KB buffer size

Divide debug information into smaller files Use "fw ctl kdebug -f -o "filename" -m 25 - s "1024"

Reduce debug buffer to 1024KB and run debug for several times

Use Check Point InfoView utility to analyze debug output

34. Which of the following inputs is suitable for debugging HTTPS inspection issues?

vpn debug cptls on

fw ctl debug Cm fw + conn drop cptls

fw diag debug tls enable

fw debug tls on TDERROR_ALL_ALL=5

35. Which command can be run in Expert mode lo verify the core dump settings?

grep cdm /config/db/coredump

grep cdm /config/db/initial

grep SFWDlR/config/db/initial

cat /etc/sysconfig/coredump/cdm conf

36. What does SIM handle?

Accelerating packets

FW kernel to SXL kernel hand off

OPSEC connects to SecureXL

Hardware communication to the accelerator

37. Which file is commonly associated with troubleshooting crashes on a system such as the Security Gateway?

core dump

CPMIL dump

fw monitor

tcpdump

38. Vanessa is reviewing ike.elg file to troubleshoot failed site-to-site VPN connection After sending Mam Mode Packet 5 the response from the peer is PAYLOAD-MALFORMED"

What is the reason for failed VPN connection?

The authentication on Phase 1 is causing the problem. Pre-shared key on local gateway encrypted by the hash algorithm created in Packet 3 and Packet 4 doesn't match with the hash on the peer gateway generated by encrypting its pre-shared key

The authentication on Phase 2 is causing the problem Pre-shared key on local gateway encrypted by the hash algorithm created in Packets 1 and 2 doesn't match with the hash on the peer gateway generated by encrypting its pre-shared key

The authentication on Quick Mode is causing the problem Pre-shared key on local gateway encrypted by the hash algorithm created in Packets 3 and 4 doesn't match with the hash on the peer gateway generated by encrypting its pre-shared key

The authentication on Phase 1 is causing the problem Pre-shared key on local gateway encrypted by the hash algorithm doesn't match with the hash on the peer gateway generated by encrypting its pre-shared key created in Packet 1 and Packet 2

39. For TCP connections, when a packet arrives at the Firewall Kemel out of sequence or fragmented, which layer of IPS corrects this lo allow for proper inspection?

Passive Streaming Library

Protections

Protocol Parsers

Context Management

40. What is the correct syntax to turn a VPN debug on and create new empty debug files?

vpn debug truncon

vpndebug trunc on

vpn kdebug on

vpn debug trunkon

Page 5 of 10

41. What command is usedtofind out which port Multi-Portal has assigned to the Mobile Access Portal?

mpclient getdata sslvpn

netstat -nap | grep mobile

mpclient getdata mobi

netstat getdata sslvpn

42. What is the simplest and most efficient way to check all dropped packets in real time?

fw ctl zdebug * drop in expert mode

Smartlog

cat /dev/fwTlog in expert mode

tail -f SFWDIR/log/fw log |grep drop in expert mode

43. What table does the command "fwaccel conns" pull information from?

fwxl_conns

SecureXLCon

cphwd_db

sxl_connections

44. What is the kernel process for Content Awareness that collects the data from the contexts received from the CMI and decides if the file is matched by a data type?

dlpda

dlpu

cntmgr

cntawmod

45. Where do Protocol parsers register themselves for IPS?

Passive Streaming Library

Other handlers register to Protocol parser

Protections database

Context Management Infrastructure

46. Which command do you need to execute to insert fw monitor after TCP streaming (out) in the outbound chain using absolute position? Given the chain was 1ffffe0, choose the correct answer.

fw monitor Cpo -0x1ffffe0

fw monitor Cp0 ox1ffffe0

fw monitor Cpo 1ffffe0

fw monitor Cp0 Cox1ffffe0

47. What are the four ways to insert an FW Monitor into the firewallkernel chain?

Relative position using location, relativepositionusing alias, absolute position, all positions

Absolute position using location, absolute position using alias, relative position, all positions

Absolute position using location, relative position using alias, general position, all positions

Relative position using geolocation relative position using inertial navigation, absolute position all positions

48. Rules within the Threat Prevention policy use the Malware database and network objects.

Which directory is used for the Malware database?

$FWDIR/conf/install_manager_tmp/ANTIMALWARE/conf/

$CPDIR/conf/install_manager_lmp/ANTIMALWARE/conf/

$FWDlR/conf/install_firewall_imp/ANTIMALWARE/conf/

$FWDlR/log/install_manager_tmp/ANTIMALWARBlog?

49. Check Point's PostgreSQL is partitioned into several relational database domains.

Which domain contains network objects and security policies?

User Domain

System Domain

Global Domain

Log Domain

50. During firewall kernel debug with fw ctl zdebug you received less information than expected. You noticed that a lot of messages were lost since the time the debug was started.

What should you do to resolve this issue?

Increase debug buffer; Use fw ctl debug Cbuf 32768

Redirect debug output to file; Use fw ctl zdebug Co ./debug.elg

Increase debug buffer; Use fw ctl zdebug Cbuf 32768

Redirect debug output to file; Use fw ctl debug Co ./debug.elg

Page 6 of 10

51. What command sets a specific interface as not accelerated?

noaccel-s<interface1>

fwaccel exempt state <interface1>

nonaccel -s <interface1>

fwaccel -n <intetface1 >

52. Which Threat Prevention daemon is the core Threat Emulator, engine and responsible for emulation files and communications with Threat Cloud?

ctasd

inmsd

ted

scrub

53. The management configuration stored in the Postgres database is partitioned into several relational database Domains, like - System, User, Global and Log Domains. The User Domain stores the network objects and security policies.

Which of the following is stored in the Log Domain?

Configuration data of Log Servers and saved queries for applications

Active Logs received from Security Gateways and Management Servers

Active and past logs received from Gateways and Servers

Log Domain is not stored in Postgres database, it is part of Solr indexer only

54. Which process is responsible for the generation of certificates?

cpm

cpca

dbsync

fwm

55. the difference in debugging a S2S or C2S (using Check Point VPN Client) VPN?

there is no difference

the C2S VPN uses a different VPN deamon and there a second VPN debug

the C2S VPN can not be debugged as it uses different protocols for the key exchange

the C2S client uses Browser based SSL vpn and cant be debugged

56. The two procedures available for debugging in the firewall kernel are

i fw ctl zdebug

ii fw ctl debug/kdebug

Choose the correct statement explaining the differences in the two

(i) is used to debug the access control policy only, however (n) can be used to debug a unified policy

(i) is used to debug only issues related to dropping of traffic, however (n) can be used for any firewall issue including NATing, clustering etc.

(i) is used on a Security Gateway, whereas (11) is used on a Security Management Server

57. When a User Mode process suddenly crashes it may create a core dump file.

Which of the following information is available in the core dump and may be used to identify the root cause of the crash?

i Program Counter

ii Stack Pointer

ii. Memory management information

iv Other Processor and OS flags / information

i, ii, lii and iv

i and n only

iii and iv only

D Only iii

58. What is the buffer size set by the fw ctl zdebug command?

1 MB

1 GB

8MB

8GB

59. You have configured IPS Bypass Under Load function with additional kernel parameters ids_tolerance_no_stress=15 and ids_tolerance_stress-15 For configuration you used the *fw ctl set' command After reboot you noticed that these parameters returned to their default values.

What do you need to do to make this configuration work immediately and stay permanent?

Set these parameters again with “fw ctl set” and edit appropriate parameters in $FWDIR/boot/modules/ fwkern.conf

Use script $FWDIR/bin IpsSetBypass.sh to set these parameters

Set these parameters again with “fw ctl set” and save configuration with “save config”

Edit appropriate parameters in $FWDIR/boot/modules/fwkern.conf

60. What are some measures you can take to prevent IPS false positives?

Exclude problematic services from being protected by IPS (sip, H 323, etc )

Use IPS only in Detect mode

Use Recommended IPS profile

Capture packets. Update the IPS database, and Back up custom IPS files

Page 7 of 10

61. What is the function of the Core Dump Manager utility?

To generate a new core dump for analysis

To limit the number of core dump files per process as well as the total amount of disk space used by core files

To determine which process is slowing down the system

To send crash information to an external analyzer

62. John works for ABC Corporation.They have enabled CoreXL on their firewall John would like to identify the cores on which the SND runs and the cores on which the firewall instance is running.

Which command should John run to view the CPU role allocation?

fw ctl affinity -v

fwaccel stat -I

fw ctl affinity -I

fw ctl cores

63. Which of the following daemons is used for Threat Extraction?

scrubd

extractd

tex

tedex

64. URL Filtering is an essential part of Web Security in the Gateway. For the Security Gateway to perform a URL lookup when a client makes a URL request, where is the sync-request forwarded from if a sync-request is required''

RAD Kernel Space

URLF Kernel Client

URLF Online Service

RAD User Space

65. You are upgrading your NOC Firewall (on a Check Point Appliance) from R77 to R80 30 but you did not touch thesecuritypolicy After the upgrade you can't connect to the new R80 30 SmartConsole of the upgraded Firewall anymore

What is a possible reason for this?

new new console port is 19009 and a access rule ts missing

the license became invalig and the firewall does not start anymore

the upgrade process changed the interfaces and IP adresses and you have to switch cables

the IPS System on the new R80.30 Version prohibits direct Smartconsole access to a standalone firewall

66. What command is usedtofind out which port Multi-Portal has assigned to the Mobile Access Portal?

mpclient getdata sslvpn

netstat -nap | grep mobile

mpclient getdata mobi

netstat getdata sslvpn

67. What is the simplest and most efficient way to check all dropped packets in real time?

fw ctl zdebug * drop in expert mode

Smartlog

cat /dev/fwTlog in expert mode

tail -f SFWDIR/log/fw log |grep drop in expert mode

68. What table does the command "fwaccel conns" pull information from?

fwxl_conns

SecureXLCon

cphwd_db

sxl_connections

69. What is the kernel process for Content Awareness that collects the data from the contexts received from the CMI and decides if the file is matched by a data type?

dlpda

dlpu

cntmgr

cntawmod

70. Where do Protocol parsers register themselves for IPS?

Passive Streaming Library

Other handlers register to Protocol parser

Protections database

Context Management Infrastructure

Page 8 of 10

71. Which command do you need to execute to insert fw monitor after TCP streaming (out) in the outbound chain using absolute position? Given the chain was 1ffffe0, choose the correct answer.

fw monitor Cpo -0x1ffffe0

fw monitor Cp0 ox1ffffe0

fw monitor Cpo 1ffffe0

fw monitor Cp0 Cox1ffffe0

72. What are the four ways to insert an FW Monitor into the firewallkernel chain?

Relative position using location, relativepositionusing alias, absolute position, all positions

Absolute position using location, absolute position using alias, relative position, all positions

Absolute position using location, relative position using alias, general position, all positions

Relative position using geolocation relative position using inertial navigation, absolute position all positions

73. Rules within the Threat Prevention policy use the Malware database and network objects.

Which directory is used for the Malware database?

$FWDIR/conf/install_manager_tmp/ANTIMALWARE/conf/

$CPDIR/conf/install_manager_lmp/ANTIMALWARE/conf/

$FWDlR/conf/install_firewall_imp/ANTIMALWARE/conf/

$FWDlR/log/install_manager_tmp/ANTIMALWARBlog?

74. Check Point's PostgreSQL is partitioned into several relational database domains.

Which domain contains network objects and security policies?

User Domain

System Domain

Global Domain

Log Domain

75. During firewall kernel debug with fw ctl zdebug you received less information than expected. You noticed that a lot of messages were lost since the time the debug was started.

What should you do to resolve this issue?

Increase debug buffer; Use fw ctl debug Cbuf 32768

Redirect debug output to file; Use fw ctl zdebug Co ./debug.elg

Increase debug buffer; Use fw ctl zdebug Cbuf 32768

Redirect debug output to file; Use fw ctl debug Co ./debug.elg

76. What command sets a specific interface as not accelerated?

noaccel-s<interface1>

fwaccel exempt state <interface1>

nonaccel -s <interface1>

fwaccel -n <intetface1 >

77. Which Threat Prevention daemon is the core Threat Emulator, engine and responsible for emulation files and communications with Threat Cloud?

ctasd

inmsd

ted

scrub

78. The management configuration stored in the Postgres database is partitioned into several relational database Domains, like - System, User, Global and Log Domains. The User Domain stores the network objects and security policies.

Which of the following is stored in the Log Domain?

Configuration data of Log Servers and saved queries for applications

Active Logs received from Security Gateways and Management Servers

Active and past logs received from Gateways and Servers

Log Domain is not stored in Postgres database, it is part of Solr indexer only

79. Which process is responsible for the generation of certificates?

cpm

cpca

dbsync

fwm

80. the difference in debugging a S2S or C2S (using Check Point VPN Client) VPN?

there is no difference

the C2S VPN uses a different VPN deamon and there a second VPN debug

the C2S VPN can not be debugged as it uses different protocols for the key exchange

the C2S client uses Browser based SSL vpn and cant be debugged

Page 9 of 10

81. The two procedures available for debugging in the firewall kernel are

i fw ctl zdebug

ii fw ctl debug/kdebug

Choose the correct statement explaining the differences in the two

(i) is used to debug the access control policy only, however (n) can be used to debug a unified policy

(i) is used to debug only issues related to dropping of traffic, however (n) can be used for any firewall issue including NATing, clustering etc.

(i) is used on a Security Gateway, whereas (11) is used on a Security Management Server

82. When a User Mode process suddenly crashes it may create a core dump file.

Which of the following information is available in the core dump and may be used to identify the root cause of the crash?

i Program Counter

ii Stack Pointer

ii. Memory management information

iv Other Processor and OS flags / information

i, ii, lii and iv

i and n only

iii and iv only

D Only iii

83. What is the buffer size set by the fw ctl zdebug command?

1 MB

1 GB

8MB

8GB

84. You have configured IPS Bypass Under Load function with additional kernel parameters ids_tolerance_no_stress=15 and ids_tolerance_stress-15 For configuration you used the *fw ctl set' command After reboot you noticed that these parameters returned to their default values.

What do you need to do to make this configuration work immediately and stay permanent?

Set these parameters again with “fw ctl set” and edit appropriate parameters in $FWDIR/boot/modules/ fwkern.conf

Use script $FWDIR/bin IpsSetBypass.sh to set these parameters

Set these parameters again with “fw ctl set” and save configuration with “save config”

Edit appropriate parameters in $FWDIR/boot/modules/fwkern.conf

85. What are some measures you can take to prevent IPS false positives?

Exclude problematic services from being protected by IPS (sip, H 323, etc )

Use IPS only in Detect mode

Use Recommended IPS profile

Capture packets. Update the IPS database, and Back up custom IPS files

86. What is the function of the Core Dump Manager utility?

To generate a new core dump for analysis

To limit the number of core dump files per process as well as the total amount of disk space used by core files

To determine which process is slowing down the system

To send crash information to an external analyzer

87. John works for ABC Corporation.They have enabled CoreXL on their firewall John would like to identify the cores on which the SND runs and the cores on which the firewall instance is running.

Which command should John run to view the CPU role allocation?

fw ctl affinity -v

fwaccel stat -I

fw ctl affinity -I

fw ctl cores

88. Which of the following daemons is used for Threat Extraction?

scrubd

extractd

tex

tedex

89. URL Filtering is an essential part of Web Security in the Gateway. For the Security Gateway to perform a URL lookup when a client makes a URL request, where is the sync-request forwarded from if a sync-request is required''

RAD Kernel Space

URLF Kernel Client

URLF Online Service

RAD User Space

90. You are upgrading your NOC Firewall (on a Check Point Appliance) from R77 to R80 30 but you did not touch thesecuritypolicy After the upgrade you can't connect to the new R80 30 SmartConsole of the upgraded Firewall anymore

What is a possible reason for this?

new new console port is 19009 and a access rule ts missing

the license became invalig and the firewall does not start anymore

the upgrade process changed the interfaces and IP adresses and you have to switch cables

the IPS System on the new R80.30 Version prohibits direct Smartconsole access to a standalone firewall

Page 10 of 10

91. You are running R80.XX on an open server and you see a high CPU utilization on your 12 CPU cores You now want to enable Hyperthreading to get more cores to gain some performance.

What is the correct way to achieve this?

Hyperthreading is not supported on open servers, on on Check Point Appliances

just turn on HAT in the bios of the server and boot it

just turn on HAT in the bios of the server and after it has booted enable it in cpconfig

in dish run set HAT on

92. Where will the usermode core files be located?

/var/log/dump/usermode

/var/suroot

SFWDlR/var'log/dump/usermode

SCPDIR/var/log/dump/usermode

93. When running a debug with fw monitor, which parameter will create a more verbose output?

-i

-0

-d

94. PostgreSQL is a powerful, open source relational database management system Check Point offers a command for viewing the database to interact with Postgres interactive shell

Which command do you need to enter the PostgreSQL interactive shell?

psql_client cpm postgres

mysql_client cpm postgres

psql_c!ieni postgres cpm

mysql -u root

95. Check Point Access Control Daemons contains several daemons for Software Blades and features

Which Daemon is usedfor Application & Control URL Filtering?

rad

cprad

pepd

pdpd