Free Practice Questions for Check Point 156-586 Exam

Question 1

What is the Security Gateway directory where an administrator can find vpn debug log files generated during Site-to-Site VPN troubleshooting?

A/opt/CPsuiteR80/vpn/log/

B$FWDIR/conf/

C$FWDIR/log/

D$CPDIR/conf/

Correct Answer: C. $FWDIR/log/

Question 2

What are the four main database domains?

ALocal, Global, User, VPN

BSystem. Global. Log. Event

CSystem, User, Global. Log

DSystem, User, Host, Network

Correct Answer: C. System, User, Global. Log

Question 3

What is the name of the VPN kernel process?

AFWK

BVPND

CCVPND

DVPNK

Correct Answer: C. CVPND

Question 4

The Check Point Firewall Kernel is the core component of the Gaia operating system and an integral part of the traffic inspection process. There are two procedures available for debugging the firewall kernel. Which procedure/command is used for troubleshooting packet drops and other kernel activities while using minimal resources (1 MB buffer)?

Afw debug ctl

Bfw ctl debug/kdebug

Cfw ctl zdebug

Dfwk ctl debug

Correct Answer: B. fw ctl debug/kdebug

Question 5

Captive Portal, PDP and PEP run in what space?

AKernel

BUser

CCPM

DFWD

Correct Answer: B. User

Question 6

The FileApp parser in the Content Awareness engine does not extract text from which of the following file types?

AMicrosoft Office Excel files

BPDF's

CMicrosoft Office .docx files

DMicrosoft Office Powerpoint files

Correct Answer: D. Microsoft Office Powerpoint files

Question 7

If SmartLog is not active or failed to parse results from server, what commands can be run to re-enable the service?

Asmartlogrestart and smartlogstart

Bsmartlogstart and smartlogstop

Csmartloginit and smartlogstop

Dsmartlogstart and smartlogsetup

Correct Answer: B. smartlogstart and smartlogstop

Question 8

You do not see logs in the SMS. When you login on the SMS shell and run cpwd_admin list you notice that the RFL process is with status T. What command can you run to try to resolve it?

ARFLstop and RFLstart

Bevstart and evstop

Csmartlog_server stop and smartlog_server restart

Drflsop and rflstart

Correct Answer: D. rflsop and rflstart

Question 9

What is correct about the Resource Advisor (RAD) service on the Security Gateways?

ARAD functions completely in user space. The Pattern Matter (PM) module of the CMI looks up for URLs in the cache and if not found, contact the RAD process in user space to do online categorization

BRAD is completely loaded as a kernel module that looks up URL in cache and if not found connects online for categorization. There is no user space involvement in this process

CRAD is not a separate module, it is an integrated function of the W kernel module and does all operations in the kernel space

DRAD has a kernel module that looks up the kernel cache, notifies client about hits and misses and forwards a-sync requests to RAD user space module which is responsible for online categorization

Correct Answer: D. RAD has a kernel module that looks up the kernel cache, notifies client about hits and misses and forwards a-sync requests to RAD user space module which is responsible for online categorization

Question 10

You receive reports from multiple users that they cannot browse. Upon further discovery you identify that Identity Awareness cannot identify the users properly and apply the configured Access Roles. What commands you can use to troubleshoot all identity collectors and identity providers from the command line?

Aon the gateway: pdp debug set AD all and IDC all

Bon the management: pdp debug on IDC all

Con the management: pdp debug set all all

DIon the gateway: pdp debug set IDC all IDP all

Correct Answer: D. Ion the gateway: pdp debug set IDC all IDP all