156-585 Free Practice Test

Which command(s) will turn off all vpn debug collection?

1. A. vpn debug off
2. B. vpn debug -a off
3. C. vpn debug off and vpn debug ikeoff
4. D. fw ctl debug 0

Correct Answer: C

The Check Pom! Firewall Kernel is the core component of the Gaia operating system and an integral part of the traffic inspection process There are two procedures available for debugging the firewall kernel Which procedure/command is used for troubleshooting packet drops and other kernel activites while using minimal resources (1 MB buffer)?

1. A. fw ctl zdebug
2. B. fw ctl debug/kdebug
3. C. fwk ctl debug
4. D. fw debug ctl

Correct Answer: A

What is the name of the VPN kernel process?

1. A. VPNK
2. B. VPND
3. C. CVPND
4. D. FWK

Correct Answer: A

What is the simplest and most efficient way to check all dropped packets in real time?

1. A. fw ctl zdebug * drop in expert mode
2. B. Smartlog
3. C. cat /dev/fwTlog in expert mode
4. D. tail -f SFWDIR/log/fw log |grep drop in expert mode

Correct Answer: D

How many tiers of pattern matching can a packet pass through during IPS inspection?

1. A. 2
2. B. 1
3. C. 5
4. D. 9

Correct Answer: A