Question 1
When dealing with monolithic operating systems such as Gaia where are system calls initiated from to achieve a required system level function?
Correct Answer:
A. Kernel Mode
Free Check Point Check Point Certified Troubleshooting Expert - R81.20 156-587 Exam Questions
Question 2
What is the benefit of fw ctl debug over fw ctl zdebug?
Correct Answer:
C. It allows you to debug multiple modules at the same time
Question 3
You receive complains that Guest Users cannot login and use the Guest Network which is configured with Access Role of Guest Users. You need to verity the Captive Portal configuration. Where can
you find the config file?
Correct Answer:
A. on the gateway at $NACPORTAL_ HOME/conf/httpd_ nac.conf
Question 4
The packet processing infrastructure consists of 4 components. Which component contains the CLOB, the object that contains information about the packet that is needed to make security decisions?
Correct Answer:
B. Classifiers
Question 5
What is the function of the Core Dump Manager utility?
Correct Answer:
C. To limit the number of core dump files per process as well as the total amount of disk space used by core files
Explanation:
The Core Dump Manager (CDM) is a utility that helps manage core dump files on Check Point systems. Its main functions include:
Limiting file size and number: CDM can be configured to limit the size of individual core dump files and the total amount of disk space used for core dumps. This prevents core dumps from filling up valuable disk space.
Compression: CDM can compress core dump files to reduce their storage size. This is particularly helpful when dealing with large core dumps.
Process filtering: CDM allows you to specify which processes should be allowed to generate core dumps. This can help prevent unnecessary core dumps from being created.
Remote collection: CDM can be configured to send core dump files to a remote server for analysis. This is useful in environments where direct access to the system generating the core dump is limited.
By using CDM, you can effectively manage core dump files and ensure that they are not overwhelming your system's resources.
Question 6
What is the best way to resolve an issue caused by a frozen process?
Correct Answer:
D. Kill the process
Explanation:
When a process is frozen (hung or unresponsive), the typical method to resolve it is to kill the process. On Check Point, you can use cpwd_admin kill -name <ProcessName> or a standard Linux kill -9 <PID> command if necessary. You then allow CPWD (the Check Point watchdog) to restart it, or manually restart it if needed.
Other options:
A . Power off the machine: This is too drastic and not recommended just for a single frozen process.
B . Restart the process: While this sounds viable, you typically must kill the frozen process first, then let WatchDog or an admin restart it.
C . Reboot the machine: Similar to powering off---too disruptive for just one stuck process.
Hence, the most direct and standard approach: ''Kill the process.''
Check Point Troubleshooting Reference
sk97638 -- Explanation of CPWD (Check Point WatchDog) and how to manage processes.
sk43807 -- How to gracefully stop or kill a Check Point process.
Check Point CLI Reference Guide -- Details on using cpwd_admin commands to kill or restart processes.
Question 7
Check Point Access Control Daemons contains several daemons for Software Blades and features. Which Daemon is used for Application & Control URL Filtering?
Correct Answer:
B. rad
Question 8
What file contains the RAD proxy settings?
Correct Answer:
D. rad_settings.C
Question 9
What is the kernel process for Content Awareness that collects the data from the contexts received from the CMI and decides if the file is matched by a data type?
Correct Answer:
A. cntawmod
Question 10
You are using the identity Collector with identity Awareness in large environment. Users report that they cannot access resources on Internet You identify that the traffic is matching the cleanup rule
Instead of the proper rule with Access Roles using the IDC How can you check if IDC is working?
Correct Answer:
A. pdp connections idc