156-585 Free Practice Test

Which command do you need to execute to insert fw monitor after TCP streaming (out) in the outbound chain using absolute position? Given the chain was 1ffffe0, choose the correct answer.

1. A. fw monitor –po -0x1ffffe0
2. B. fw monitor –p0 ox1ffffe0
3. C. fw monitor –po 1ffffe0
4. D. fw monitor –p0 –ox1ffffe0

Correct Answer: A
https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/CP_R80.40_PerformanceTuning_AdminG

What are the main components of Check Point's Security Management architecture?

1. A. Management server, management database, log server, automation server
2. B. Management server, Security Gatewa
3. C. Multi-Domain Server, SmartEvent Server
4. D. Management Serve
5. E. Log Serve
6. F. LDAP Server, Web Server
7. G. Management server Log server, Gateway serve
8. H. Security server

Correct Answer: A

Where do Protocol parsers register themselves for IPS?

1. A. Passive Streaming Library
2. B. Other handlers register to Protocol parser
3. C. Protections database
4. D. Context Management Infrastructure

Correct Answer: A

What acceleration mode utlizes multi-core processing to assist with traffic processing?

1. A. CoreXL
2. B. SecureXL
3. C. HyperThreading
4. D. Traffic Warping

Correct Answer: C

In Security Management High Availability, if the primary and secondary managements, running the same version of R80.x, are in a state of ‘Collision’, how can this be resolved?

1. A. Administrator should manually synchronize the servers using SmartConsole
2. B. The Collision state does not happen in R80.x as the synchronizing automatically on every publish action
3. C. Reset the SIC of the secondary management server
4. D. Run the command ‘fw send synch force’ on the primary server and ‘fw get sync quiet’ on the secondary server

Correct Answer: A