NEW QUESTION 1
For TCP connections, when a packet arrives at the Firewall Kemel out of sequence or fragmented, which layer of IPS corrects this lo allow for proper inspection?

• A. Passive Streaming Library
• B. Protections
• C. Protocol Parsers
• D. Context Management

Answer: D

NEW QUESTION 2
Where will the usermode core files be located?

• A. /var/log/dump/usermode
• B. /var/suroot
• C. SFWDlR/var'log/dump/usermode
• D. SCPDIR/var/log/dump/usermode

Answer: A

NEW QUESTION 3
the difference in debugging a S2S or C2S (using Check Point VPN Client) VPN?

• A. there is no difference
• B. the C2S VPN uses a different VPN deamon and there a second VPN debug
• C. the C2S VPN can not be debugged as it uses different protocols for the key exchange
• D. the C2S client uses Browser based SSL vpn and cant be debugged

Answer: D

NEW QUESTION 4
John works for ABC Corporation. They have enabled CoreXL on their firewall John would like to identify the cores on which the SND runs and the cores on which the firewall instance is running. Which command should John run to view the CPU role allocation?

• A. fw ctl affinity -v
• B. fwaccel stat -I
• C. fw ctl affinity -I
• D. fw ctl cores

Answer: C

NEW QUESTION 5
How does the URL Filtering Categorization occur in the kernel?
* 1. RAD provides the status of the search to the client.
* 2. The a-sync request is forwarded to the RAD User space via the RAD kernel for online categorization.
* 3. The online detection service responds with categories and the kernel cache is updated.
* 4. The kernel cache notifies the RAD kernel of hits and misses.
* 5. URL lookup initiated by the client.
* 6. URL lookup occurs in the kernel cache.
* 7. The client sends an a-sync request back to RAD If the URL was not found.

• A. 5, 6, 7, 1, 3, 2, 4
• B. 5, 6, 2, 4, 1, 7, 3
• C. 5, 6, 4, 1, 7, 2, 3
• D. 5, 6, 3, 1, 2, 4, 7

Answer: C

NEW QUESTION 6
Joey is configuring a site-to-site VPN with his business partner. On Joey’s site he has a Check Point R80.10 Gateway and his partner uses Cisco ASA 5540 as a gateway.
Joey’s VPN domain on the Check Point Gateway object is manually configured with a group object that contains two network objects:
VPN_Domain3 = 192.168.14.0/24 VPN_Domain4 = 192.168.15.0/24
Partner’s site ACL as viewed from “show run”
access-list JOEY-VPN extended permit ip 172.26.251.0 255.255.255.0 192.168.14.0 255.255.255.0
access-list JOEY-VPN extended permit ip 172.26.251.0 255.255.255.0 192.168.15.0 255.255.255.0 When they try to establish VPN tunnel, it fails. What is the most likely cause of the failure given the
information provided?

• A. Tunnel falls on partner sit
• B. It is likely that the Cisco ASA 5540 will reject the Phase 2 negotiation.Check Point continues to present its own encryption domain as 192.168.14.0/24 and 192.168.15.0/24, but the peer expects the one network 192.168.14.0/23
• C. Tunnel fails on partner sit
• D. It is likely that the Cisco ASA 5540 will reject the Phase 2 negotiation.Check Point continues to present its own encryption domain as 192.168.14.0/23, but the peer expects the two distinct networks 192.168.14.0/24 and 192.168.15.0/24.
• E. Tunnel fails on Joey’s site, because he misconfigured IP address of VPN peer.
• F. Tunnel falls on partner sit
• G. It is likely that the Cisco ASA 5540 will reject the Phase 2 negotiation due to the algorithm mismatch.

Answer: B

NEW QUESTION 7
Which one of the following is NOT considered a Solr core partition:

• A. CPM_0_Revisions
• B. CPM_Global_A
• C. CPM_Gtobal_R
• D. CPM_0_Disabled

Answer: D

NEW QUESTION 8
You are upgrading your NOC Firewall (on a Check Point Appliance) from R77 to R80 30 but you did not touch the security policy After the upgrade you can't connect to the new R80 30 SmartConsole of the upgraded Firewall anymore What is a possible reason for this?

• A. new new console port is 19009 and a access rule ts missing
• B. the license became invalig and the firewall does not start anymore
• C. the upgrade process changed the interfaces and IP adresses and you have to switch cables
• D. the IPS System on the new R80.30 Version prohibits direct Smartconsole access to a standalone firewall

Answer: D

NEW QUESTION 9
What is the benefit of running "vpn debug trunc over "vpn debug on"?

• A. "vpn debug trunc" purges ike.elg and vpnd elg and creates limestarnp while starting ike debug and vpn debug
• B. "vpn debug trunc* truncates the capture hence the output contains minimal capture
• C. "vpn debug trunc* provides verbose capture
• D. No advantage one over the other

Answer: A

NEW QUESTION 10
Check Point Access Control Daemons contains several daemons for Software Blades and features. Which Daemon is used for Application & Control Filtering?

• A. rad
• B. cprad
• C. pepd
• D. pdpd

Answer: A

NEW QUESTION 11
To check the current status of hyper-threading, which command would you execute in expert mode?

• A. cat /proc/hypert_status
• B. cat /proc/smt_status
• C. cat /proc/hypert_stat
• D. cat /proc/smt_stat

Answer: B

NEW QUESTION 12
Troubleshooting issues with Mobile Access requires the following:

• A. Standard VPN debugs, packet captures, and debugs of cvpnd' process on Security Gateway
• B. Standard VPN debugs and packet captures on Security Gateway, debugs of "cvpnd' process on Security Management
• C. 'ma_vpnd' process on Secunty Gateway
• D. Debug logs of FWD captured with the command - 'fw debug fwd on TDERROR_MOBILE_ACCESS=5'

Answer: A

NEW QUESTION 13
PostgreSQL is a powerful, open source relational database management system Check Point offers a command for viewing the database to interact with Postgres interactive shell Which command do you need to enter the PostgreSQL interactive shell?

• A. psql_client cpm postgres
• B. mysql_client cpm postgres
• C. psql_c!ieni postgres cpm
• D. mysql -u root

Answer: A

NEW QUESTION 14
What is the main SecureXL database for tracking acceleration status of traffic?

• A. cphwd_db
• B. cphwd_tmp1
• C. cphwd_dev_conn_table
• D. cphwd_dev_identity_table

Answer: B

NEW QUESTION 15
If the cpsemd process of SmartEvent has crashed or is having trouble coming up. then it usually indicates that .

• A. Postgres database ts down
• B. Cpd daemon is unable to connect to the log server
• C. The SmartEvent core on the Solr mdexer has been deleted
• D. The logged in administrator does not have permissions to run SmartEvent

Answer: C

NEW QUESTION 16
What are four main database domains?

• A. System, Global, Log, Event
• B. System, User, Host, Network
• C. Local, Global, User, VPN
• D. System, User, Global, Log

Answer: D

NEW QUESTION 17
......