Free Check Point Certified Troubleshooting Expert Exam 156-585 Exam Practice Test

Your users have some issues connecting Mobile Access VPN to the gateway. How can you debug the tunnel establishment?

• in the file $CVPNDIR/conf/httpd.conf change the line loglevel .. To LogLevel debug and run cvpnrestart
  
• run vpn debug truncon
  
• run fw ctl zdebug -m sslvpn all
  
• in the file $VPNDIR/conf/httpd.conf the line Loglevel .. To LogLevel debug and run vpn restart
  

What are four main database domains?

• System, Global, Log, Event
  
• System, User, Host, Network
  
• Local, Global, User, VPN
  
• System, User, Global, Log
  

Some users from your organization have been reported some connection problems with CIFS since this morning. You suspect an IPS Issue after an automatic IPS update last night. So you want to perform a packet capture on uppercase I only directly after the IPS module (position 4 in the chain) to check if the packets pass the IPS. What command do you need to run?

• fw monitor -ml -pl 5 -e <filterexpression>
  
• fw monitor -pi 5 -e <filterexpression>
  
• tcpdump -eni any <filterexpression>
  
• fw monitor -pl asm <filterexpression>
  

What is the name of the VPN kernel process?

• VPNK
  
• VPND
  
• CVPND
  
• FWK
  

Your fwm constantly crashes and is restarted by the watchdog. You can't find any coredumps related to this process, so you need to check If coredumps are enabled at all How can you achieve that?

• in dish run show core-dump status
  
• in expert mode run show core-dump status
  
• in dish run set core-dump status
  
• in dish run show coredumb status
  

The Check Point Firewall Kernel is the core component of the Gala operating system and an integral part of traffic inspection process. There are two procedures available for debugging the firewall kernel. Which procedure/command is used for detailed troubleshooting and needs more resources?

• fw ctl debug/kdebug
  
• fw ctl zdebug
  
• fw debug/kdebug
  
• fw debug/kdebug ctl
  

Which of the following is NOT a valid 'fwaccel' parameter?

• stat
  
• stats
  
• templates
  
• packets
  

What is the most efficient way to view large fw monitor captures and run filters on the file?

• wireshark
  
• CLISH
  
• CLI
  
• snoop
  

Where do Protocol parsers register themselves for IPS?

• Passive Streaming Library
  
• Other handlers register to Protocol parser
  
• Protections database
  
• Context Management Infrastructure
  

What file contains the RAD proxy settings?

• rad_settings.C
  
• rad_services.C
  
• rad_scheme.C
  
• rad_control.C