156-585 Free Practice Test

After kernel debug with "fw ctl debug" you received a huge amount of information It was saved in a very large file that is difficult to open and analyze with standard text editors Suggest a solution to solve this issue.

1. A. Use "fw ctl zdebug' because of 1024KB buffer size
2. B. Divide debug information into smaller files Use "fw ctl kdebug -f -o "filename" -m 25 - s "1024"
3. C. Reduce debug buffer to 1024KB and run debug for several times
4. D. Use Check Point InfoView utility to analyze debug output

Correct Answer: C

Vanessa is reviewing ike.elg file to troubleshoot failed site-to-site VPN connection After sending Mam Mode Packet 5 the response from the peer is PAYLOAD-MALFORMED"
What is the reason for failed VPN connection?

1. A. The authentication on Phase 1 is causing the problem.Pre-shared key on local gateway encrypted by the hash algorithm created in Packet 3 and Packet 4 doesn't match with the hash on the peer gateway generated by encrypting its pre-shared key
2. B. The authentication on Phase 2 is causing the problemPre-shared key on local gateway encrypted by the hash algorithm created in Packets 1 and 2 doesn't match with the hash on the peer gateway generated by encrypting its pre-shared key
3. C. The authentication on Quick Mode is causing the problemPre-shared key on local gateway encrypted by the hash algorithm created in Packets 3 and 4 doesn't match with the hash on the peer gateway generated by encrypting its pre-shared key
4. D. The authentication on Phase 1 is causing the problemPre-shared key on local gateway encrypted by the hash algorithm doesn't match with the hash on the peer gateway generated by encrypting its pre-shared key created in Packet 1 and Packet 2

Correct Answer: B

Which is the correct “fw monitor” syntax for creating a capture file for loading it into WireShark?

1. A. fw monitor -e “accept<FILTER EXPRESSION>;” >> Output.cap
2. B. This cannot be accomplished as it is not supported with R80.10
3. C. fw monitor -e “accept;” -file Output.cap
4. D. fw monitor -e “accept;” -o Output.cap

Correct Answer: D

What is connect about the Resource Advisor (RAD) service on the Security Gateways?

1. A. RAD has a kernel module that looks up the kernel cache, notifies client about hits and misses and forwards a-sync requests to RAD user space module which is responsible for online categorization
2. B. RAD is completely loaded as a kernel module that looks up URL in cache and if not found connects online for categorization There is no user space involvement in this process
3. C. RAD functions completely in user space The Pattern Matter (PM) module of the CMI looks up for URLs in the cache and if not found, contact the RAD process in user space to do online categorization
4. D. RAD is not a separate module, it is an integrated function of the 'fw1 kernel module and does all operations in the kernel space

Correct Answer: C