[Sep 12, 2021] 156-585 Ultimate Study Guide - Prep4pass [Q13-Q30]

[Sep 12, 2021] 156-585 Ultimate Study Guide -  Prep4pass

Ultimate Guide to Prepare 156-585 Certification Exam for CCTE in 2021

NEW QUESTION 13
What is the main SecureXL database for trackingthe acceleration status of traffic?

• A. cphwd_dev_conn_table
• B. cphwd_dev_identity_table
• C. cphwd_db
• D. cphwd_tmp1

Answer: B

 

NEW QUESTION 14
Troubleshooting issues with Mobile Access requires the following:

• A. Standard VPN debugs and packet captures on Security Gateway, debugs of "cvpnd' process on Security Management
• B. Debug logs of FWD captured with the command - 'fw debug fwd on
  TDERROR_MOBILE_ACCESS=5'
• C. 'ma_vpnd' process on Secunty Gateway
• D. Standard VPN debugs, packet captures, and debugs of cvpnd' process on Security Gateway

Answer: D

 

NEW QUESTION 15
Vanessa is reviewing ike.elg file to troubleshoot failed site-to-site VPN connection After sending Mam Mode Packet 5 the response from the peer is PAYLOAD-MALFORMED" What is the reason for failed VPN connection?

• A. The authentication on Quick Mode is causing the problem
  Pre-shared key on local gateway encrypted by the hash algorithm created in Packets 3 and 4 doesn't match with the hash on the peer gateway generated by encrypting its pre-shared key
• B. The authentication on Phase 1 is causing the problem.
  Pre-shared key on local gateway encrypted by the hash algorithm created in Packet 3 and Packet 4 doesn't match with the hash on the peer gateway generated by encrypting its pre-shared key
• C. The authentication on Phase 2 is causing the problem
  Pre-shared key on local gateway encrypted by the hash algorithm created in Packets 1 and 2 doesn't match with the hash on the peer gateway generated by encrypting its pre-shared key
• D. The authentication on Phase 1 is causing the problem
  Pre-shared key on local gateway encrypted by the hash algorithm doesn't match with the hash on the peer gateway generated by encrypting its pre-shared key created in Packet 1 and Packet 2

Answer: C

 

NEW QUESTION 16
What is the kernel process for Content Awareness that collects the data from the contexts received from the CMI and decides if the file is matched by a data type?

• A. dlpda
• B. cntawmod
• C. cntmgr
• D. dlpu

Answer: B

 

NEW QUESTION 17
What is connect about the Resource Advisor (RAD) service on the Security Gateways?

• A. RAD is completely loaded as a kernel module that looks up URL in cache and if not found connects online for categorization There isno user space involvement in this process
• B. RAD is not a separate module, it is an integrated function of the 'fw1 kernel module and does all operations in the kernel space
• C. RAD has a kernel module that looks up the kernel cache, notifies client about hits and misses andforwards a-sync requests to RADuser space module which is responsible for online categorization
• D. RAD functions completely in user space The Pattern Matter (PM) module ofthe CMI looks up for URLs in the cache and if not found, contact the RAD process inuser space to do online categorization

Answer: D

 

NEW QUESTION 18
If you run the command "fw monitor -e accept src=10.1.1.201 or src=172.21.101.10 or src=192.0.2.10;" from the cli sh What will be captured?

• A. Packets destined to 172 21 101 10 from 10.1.1.101
• B. fw monitor only works in expert mode so no packets will be captured
• C. Only packet going to 192.0.2.10
• D. Packets from 10 1 1 201 going to 192.0 2.10

Answer: C

 

NEW QUESTION 19
What does SIM handle?

• A. Accelerating packets
• B. OPSEC connects to SecureXL
• C. FW kernel to SXL kernel hand off
• D. Hardware communication to the accelerator

Answer: B

 

NEW QUESTION 20
What is the buffer size set by the fw ctl zdebug command?

• A. 1 GB
• B. 8MB
• C. 1 MB
• D. 8GB

Answer: C

 

NEW QUESTION 21
Where do Protocol parsers register themselves for IPS?

• A. Context Management Infrastructure
• B. Other handlers register to Protocol parser
• C. Protections database
• D. Passive Streaming Library

Answer: D

 

NEW QUESTION 22
Which command is most useful for debugging the fwaccel module?

• A. fwaccel dbg
• B. securexl debug
• C. fw zdebug
• D. fw debug

Answer: A

 

NEW QUESTION 23
You need to runa kernel debug over a longer period of time as the problem occurs only once or twice a week.
Therefore you need to add a timestamp to the kernel debug and write the output to a file What is the correct syntax for this?

• A. fw ctl kdebug -T -f -o filename debug
• B. fw ctl kdebug -T -f > filename debug
• C. fw ctl kdebug -T > filename debug
• D. fw ctl debug -T -f > filename debug

Answer: D

 

NEW QUESTION 24
Which Daemon should be debugged for HTTPS Inspection related issues?

• A. WSTLSO
• B. HTTPD
• C. FWD
• D. VPND

Answer: A

 

NEW QUESTION 25
After kernel debug with "fw ctl debug" you received a huge amount of information It was saved in a very large file that is difficult to open and analyze with standard text editors Suggest a solution to solve this issue.

• A. Reduce debug buffer to 1024KB and run debug for several times
• B. Use Check Point InfoView utility to analyze debug output
• C. Use "fw ctl zdebug' because of 1024KB buffer size
• D. Divide debug information into smaller files Use "fw ctl kdebug -f -o "filename" -m 25 - s "1024"

Answer: A

 

NEW QUESTION 26
What command is usually used for general firewall kernel debugging andwhatis the sizeofthe buffer that isautomaticallyenabled whenusingthe command?

• A. fw ctl debug, buffer sizeis 1024 KB
• B. fw ctl kdeoug. buffer sizeis 32000 KB
• C. fw dl zdebug, buffer size is 1 MB
• D. fw ell zdebug. buffer size is 32768 KB

Answer: B

 

NEW QUESTION 27
During firewall kernel debug with fw ctl zdebug you received less information than expected. You noticed that a lot of messages were lost since the time the debug was started. What should you do to resolve this issue?

• A. Redirect debug output to file; Use fw ctl zdebug -o ./debug.elg
• B. Redirect debug output to file; Use fw ctl debug -o ./debug.elg
• C. Increase debug buffer; Use fw ctl debug -buf 32768
• D. Increase debug buffer; Use fw ctl zdebug -buf 32768

Answer: C

 

NEW QUESTION 28
Rules within the Threat Prevention policy use the Malware database and network objects. Which directory is used for the Malware database?

• A. $FWDlR/log/install_manager_tmp/ANTIMALWARBlog?
• B. $FWDlR/conf/install_firewall_imp/ANTIMALWARE/conf/
• C. $FWDIR/conf/install_manager_tmp/ANTIMALWARE/conf/
• D. $CPDIR/conf/install_manager_lmp/ANTIMALWARE/conf/

Answer: A

 

NEW QUESTION 29
For TCP connections, when a packet arrives at the Firewall Kemel out of sequence or fragmented, which layer of IPS corrects this lo allow for proper inspection?

• A. Protocol Parsers
• B. Context Management
• C. Protections
• D. Passive Streaming Library

Answer: B

 

NEW QUESTION 30
......

CCTE Fundamentals-156-585 Exam-Practice-Dumps: https://www.prep4pass.com/156-585_exam-braindumps.html

Use Real 156-585 Dumps - CheckPoint Correct Answers: https://drive.google.com/open?id=1fXaPr0lJqwhADta1ZDAfKkPdrb1c-qwY