Free Check Point Certified Troubleshooting Expert – R81.20 Exam 156-587 Exam Practice Test

Packet processing infrastructure consists of the following components EXCEPT:

• Observers
• Manager
• Client
• Classifiers

Captive Portal, PDP and PEP run in what space?

• User
• CPM
• FWD
• Kernel

When debugging is enabled on firewall kernel module using the fw ctl debug' command with required options, many debug messages are provided by the kernel that help the administrator to identifyIssues. Which of the following is true about these debug messages generated by the kernel module?

• Messages are written to /etc/dmesg file
• Messages are written to a buffer and collected using ‘fw ctl kdebug
• Messages are written to SFWDIR
• Messages are written to console and also /var/log/messages file

What is the best way to resolve an issue caused by a frozen process?

• Power off the machine
• Restart the process
• Reboot the machine
• Kill the process

When a user space process or program suddenly crashes, what type of file is created for analysis

• core dump
• kernel_memory_dump dbg
• core analyzer
• coredebug

During firewall kernel debug with fw ctl zdebug you received less information that expected. You noticed that a lot of messages were lost since the time the debug was started. What should you do toresolve this issue?

• Increase debug buffer Use fw ctl debug -buf 32768
• Redirect debug output to file; Use fw ctl debug -o /debug.elg
• Redirect debug output to file; Use fw ctl zdebug -o /debug.elg
• Increase debug buffer; Use fw ctl zdebug -buf 32768

The Check Point Watch Daemon (CPWD) monitors critical Check Point processes, terminating them or restarting them as needed to maintain consistent, stable operating conditions. When checking the status/output of CPWD you are able to see some columns like APP, PID, STAT, START, etc. What is the column "STAT" used for?

• Shows the Watch Dog name of the monitored process
• Shows the status of the monitored process
• Shows how many times the Watch Dog started the monitored process
• Shows what monitoring method Watch Dog is using to track the process

You run a free-command on a gateway and notice that the Swap column is not zero Choose the best answer

• Utilization of ram is high and swap file had to be used
• Swap file is used regularly because RAM memory is reserved for management traffic
• Swap memory is used for heavy connections when RAM memory is full
• Its ole Swap is used to increase performance

What is the kernel process for Content Awareness that collects the data from the contexts received from the CMI and decides if the file is matched by a data type?

• cntawmod
• cntmgr
• dlpda
• dlpu

Which of these packet processing components stores Rule Base matching state-related information?

• Observers
• Classifiers
• Manager
• Handlers