Unique Top-selling 156-587 Exams - New 2024 CheckPoint Pratice Exam
CCTE Dumps 156-587 Exam for Full Questions - Exam Study Guide
NEW QUESTION # 34
In Mobile Access VPN, clientless access is done using a web browser. The primary communication path for these browser based connections is a process that allows numerous processes to utilize port 443 and redirects traffic to a designated port of the respective process.
Which daemon handles this?
- A. Connectra VPN Daemon (cvpnd)
- B. Mobile Access Daemon (MAD)
- C. Multi-portal Daemon
- D. HTTPS Inspection Daemon (HID)
Answer: C
NEW QUESTION # 35
Which type of NAT allows both incoming and outgoing connections?
- A. Port NAT
- B. Both Static and Hide NAT
- C. Hide NAT
- D. Static NAT
Answer: D
NEW QUESTION # 36
What version of Check Point can Security Gateways begin dynamically distributing Logs between log servers?
- A. R77
- B. R30
- C. R81
- D. R75
Answer: C
NEW QUESTION # 37
What Check Point process controls logging?
- A. CPD
- B. CPVVD
- C. FWD
- D. CPM
Answer: C
NEW QUESTION # 38
What is the Security Gateway directory where an administrator can find vpn debug log files generated during Site-to-Site VPN troubleshooting?
- A. /opt/CPsuiteR80/vpn/log/
- B. $FWDIR/log/
- C. $FWDIR/conf/
- D. $CPDIR/conf/
Answer: B
NEW QUESTION # 39
The management configuration stored in the Postgres database is partitioned into several relational database domains. What is the purpose of the Global Domain?
- A. This domain is used as the global database to track the changes made by multiple administrators on the same objects prior to publishing.
- B. This domain is used as the global database to back up the objects referencing the corresponding object attributes from the System Domain.
- C. Global Domains is used by the IPS software blade to map the IDs to the corresponding countries according to the IpToCountry.csv file.
- D. This domain is used as the global database for MDSM and contains global objects and policies.
Answer: D
NEW QUESTION # 40
You are using the Identity Collector with Identity Awareness in large environment. Users report that they cannot access resources on Internet. You identify that the traffic is matching the cleanup rule instead of the proper rule with Access Roles using the IDC. How can you check if IDC is working?
- A. pdp connections idc
- B. ad query | debug on
- C. pep debug idc on
- D. pdp debug set IDP all all
Answer: A
NEW QUESTION # 41
Which of the following is a component of the Context Management Infrastructure used to collect signatures in user space from multiple sources, such as Application Control and IPS, and compiles them together into unified Pattern Matchers?
- A. Context Loader
- B. cpas
- C. PSL - Passive Signature Loader
- D. CMI Loader
Answer: A
Explanation:
NEW QUESTION # 42
When a User Mode process suddenly crashes, it may create a core dump file. Which of the following information is available in the core dump and may be used to identify the root cause of the crash?
i. Program Counter
ii. Stack Pointer
iii. Memory management information
iv. Other Processor and OS flags / information
- A. iii and iv only
- B. i, ii, iii and iv
- C. Only iii
- D. i and ii only
Answer: B
NEW QUESTION # 43
In some scenarios it is very helpful to use advanced Linux commands for troubleshooting purposes. Which command displays information about resource utilization for running processes and shows additional information for core utilization and memory?
- A. top
- B. mpstat
- C. cptop
- D. vmstat
Answer: A
NEW QUESTION # 44
Captive Portal, PDP and PEP run in what space?
- A. User
- B. Kernel
- C. CPM
- D. FWD
Answer: A
NEW QUESTION # 45
Which Daemon should be debugged for HTTPS Inspection related issues?
- A. HTTPD
- B. WSTLSD
- C. VPND
- D. FWD
Answer: B
NEW QUESTION # 46
What is correct about the Resource Advisor (RAD) service on the Security Gateways?
- A. RAD is completely loaded as a kernel module that looks up URL in cache and if not found connects online for categorization. There is no user space involvement in this process
- B. RAD is not a separate module, it is an integrated function of the kernel module and does all operations in the kernel space
- C. RAD functions completely in user space. The Pattern Matter (PM) module of the CMI looks up for URLs in the cache and if not found, contact the RAD process in user space to do online categorization
- D. RAD has a kernel module that looks up the kernel cache, notifies client about hits and misses and forwards a-sync requests to RAD user space module which is responsible for online categorization
Answer: D
NEW QUESTION # 47
Which command shows the installed licenses and contracts on a Check Point device?
- A. cplic print -s
- B. fwlic print -x
- C. cplic print -x
- D. cplicenses print -x
Answer: C
NEW QUESTION # 48
John has renewed his NPTX License but he gets an error (contract for Anti-Bot expired). He wants to check the subscription status on the CLI of the gateway, what command can he use for this?
- A. fwm lie print
- B. cpstat antimalware-f subscription status
- C. fw monitor license status
- D. show license status
Answer: B
NEW QUESTION # 49
How can you start debug of the Unified Policy with all possible flags turned on?
- A. fw ctl debug -m UP
- B. fw ctl debug -m UP all
- C. fw ctl debuq -m UnifiedPolicv all
- D. fw ctl debug -m fw + UP
Answer: B
NEW QUESTION # 50
Check Point provides tools & commands to help you to identify issues about products and applications. Which Check Point command can help you to display status and statistics information for various Check Point products and applications?
- A. fwstat
- B. cpstat
- C. CPview
- D. CPstat
Answer: B
NEW QUESTION # 51
Check Point Access Control Daemons contains several daemons for Software Blades and features. Which Daemon is used for Application & Control URL Filtering?
- A. pepd
- B. rad
- C. pdpd
- D. cprac
Answer: B
Explanation:
https://support.checkpoint.com/results/sk/sk97638
NEW QUESTION # 52
You do not see logs in the SMS. When you login on the SMS shell and run cpwd_admin list you notice that the RFL process is with status T. What command can you run to try to resolve it?
- A. RFLstop and RFLstart
- B. smartlog_server stop and smartlog_server restart
- C. evstart and evstop
- D. rflsop and rflstart
Answer: C
NEW QUESTION # 53
As a security administrator/engineer in your company, you have noticed that your HQ Check Point Security Management Server is not receiving logs from your HQ Check Point Gateway/Cluster.
To investigate this issue in the command line, you will need to verify which process is running?
- A. cpd
- B. fwm
- C. cpm
- D. fwd
Answer: D
NEW QUESTION # 54
......
Best way to practice test for CheckPoint 156-587: https://examcollection.bootcamppdf.com/156-587-exam-actual-tests.html