Practice Free Check Point 156-585 Exam Questions Online, 156-585 Free Demo

Question No : 1
Check Point Access Control Daemons contains several daemons for Software Blades and features.
Which Daemon is used for Application & Control URL Filtering?

A.rad
B.cprad
C.pepd
D.pdpd

Answer:

Question No : 2
1.What command is used to find out which port Multi-Portal has assigned to the Mobile Access Portal?

A.mpclient getdata sslvpn
B.netstat -nap | grep mobile
C.mpclient getdata mobi
D.netstat getdata sslvpn

Answer:

Question No : 3
Jenna has to create a VPN tunnel to a CISCO ASA but has to set special property to renegotiate the Phase 2 tunnel after 10 MB of transferee1 data.
This can not be configured in the smart console, so how can she modify this property?

A.using GUIDBEDIT located in same directoryas Smartconsole on the Windows client
B.she need to install GUIDBEDIT which can be downloaded from the User center
C.she need to run GUIDBEDIT from CLISH which opens a graphical window on the smartcenter
D.this cant be done anymore as GUIDBEDIT is not supported in R80 anymore

Answer:

Question No : 4
Which of the following is NOT a valid "fwaccel" parameter?

A.stat
B.stats
C.templates
D.packets

Answer:
Explanation:
Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk41397

Question No : 5
When a User process or program suddenly crashes, a core dump is often used to examine the problem.
Which command is used to enable the core-dumping via GAIA dish?

A.set core-dump enable
B.set core-dump per_process
C.set user-dump enable
D.set core-dump total

Answer:

Question No : 6
The client sends an a-sync request back to RAD If the URL was not found.

A.5, 6, 7, 1, 3, 2, 4
B.5, 6, 2, 4, 1, 7, 3
C.5, 6, 4, 1, 7, 2, 3
D.5, 6, 3, 1, 2, 4, 7

Answer:

Question No : 7
The management configuration stored in the Postgres database is partitioned into several relational database Domains, like - System, User, Global and Log Domains. The User Domain stores the network objects and security policies.
Which of the following is stored in the Log Domain?

A.Configuration data of Log Servers and saved queries for applications
B.Active Logs received from Security Gateways and Management Servers
C.Active and past logs received from Gateways and Servers
D.Log Domain is not stored in Postgres database, it is part of Solr indexer only

Answer:

Question No : 8
Joey is configuring a site-to-site VPN with his business partner. On Joey’s site he has a Check Point R80.10 Gateway and his partner uses Cisco ASA 5540 as a gateway.
Joey’s VPN domain on the Check Point Gateway object is manually configured with a group object that contains two network objects:
VPN_Domain3 = 192.168.14.0/24
VPN_Domain4 = 192.168.15.0/24
Partner’s site ACL as viewed from “show run”
access-list JOEY-VPN extended permit ip 172.26.251.0 255.255.255.0 192.168.14.0 255.255.255.0
access-list JOEY-VPN extended permit ip 172.26.251.0 255.255.255.0 192.168.15.0 255.255.255.0
When they try to establish VPN tunnel, it fails .
What is the most likely cause of the failure given the information provided?

A.Tunnel falls on partner site. It is likely that the Cisco ASA 5540 will reject the Phase 2 negotiation. Check Point continues to present its own encryption domain as 192.168.14.0/24 and 192.168.15.0/24, but the peer expects the one network 192.168.14.0/23
B.Tunnel fails on partner site. It is likely that the Cisco ASA 5540 will reject the Phase 2 negotiation. Check Point continues to present its own encryption domain as 192.168.14.0/23, but the peer expects the two distinct networks 192.168.14.0/24 and 192.168.15.0/24.
C.Tunnel fails on Joey’s site, because he misconfigured IP address of VPN peer.
D.Tunnel falls on partner site. It is likely that the Cisco ASA 5540 will reject the Phase 2 negotiation due to the algorithm mismatch.

Answer:

Question No : 9
The two procedures available for debugging in the firewall kernel are
i fw ctl zdebug
ii fw ctl debug/kdebug
Choose the correct statement explaining the differences in the two

A.(i) Is used for general debugging, has a small buffer and is a quick way to set kernel debug flags to get an output via command line whereas (11) is useful when there is a need for detailed debugging and requires additional steps to set the buffer and get an output via command line
B.(i) is used to debug the access control policy only, however (n) can be used to debug a unified policy
C.(i) is used to debug only issues related to dropping of traffic, however (n) can be used for any firewall issue including NATing, clustering etc.
D.(i) is used on a Security Gateway, whereas (11) is used on a Security Management Server

Answer:

Question No : 10
When debugging is enabled on firewall kernel module using the ‘fw ctl debug’ command with required options, many debug messages are provided by the kernel that help the administrator to identify issues .
Which of the following is true about these debug messages generated by the kernel module?

A.Messages are written to a buffer and collected using ‘fw ctl kdebug’
B.Messages are written to console and also /var/log/messages file
C.Messages are written to /etc/dmesg file
D.Messages are written to $FWDIR/log/fw.elg

Answer:

Test Online Free Check Point 156-585 Exam Questions and Answers