156-585 Free Practice Test

How can you increase the ring buffer size to 1024 descriptors?

1. A. set interface eth0 rx-ringsize 1024
2. B. fw ctl int rx_ringsize 1024
3. C. echo rx_ringsize=1024>>/etc/sysconfig/sysctl.conf
4. D. dbedit>modify properties firewall_properties rx_ringsize 1024

Correct Answer: A

What are four main database domains?

1. A. System, Global, Log, Event
2. B. System, User, Host, Network
3. C. Local, Global, User, VPN
4. D. System, User, Global, Log

Correct Answer: D

You are trying to establish a VPN tunnel between two Security Gateways but fail. What initial steps will you make to troubleshoot the issue

1. A. capture traffic on both tunnel members and collect debug of IKE and VPND daemon
2. B. capture traffic on both tunnel members and collect kernel debug for fw module with vm, crypt, conn and drop flags, then collect debug of IKE and VPND daemon
3. C. collect debug of IKE and VPND daemon and collect kernel debug for fw module with vm, crypt, conn and drop flags
4. D. capture traffic on both tunnel members and collect kernel debug for fw module with vm, crypt, conn and drop flags

Correct Answer: A

What is the most efficient way to view large fw monitor captures and run filters on the file?

1. A. wireshark
2. B. CLISH
3. C. CLI
4. D. snoop

Correct Answer: A

Which situation triggers an IPS bypass under load on a 24-core Check Point appliance?

1. A. any of the CPU cores is above the threshold for more than 10 seconds
2. B. all CPU core most be above the threshold for more than 10 seconds
3. C. a single CPU core must be above the threshold for more than 10 seconds, but is must be the same core during this time
4. D. the average cpu utilization over all cores must be above the threshold for 1 second

Correct Answer: A