Try Free Check Point CCTE 156-585 Practice Exam Questions

test2021-12-07T09:27:41+00:00

The Check Point Certified Troubleshooting Expert (CCTE) provides advanced troubleshooting skills to investigate and resolve more complex issues that may occur while managing your Check Point security environment.

If you are looking for 156-585 practice exam, FreeTestShare is the best one for you! It will help you quickly pass the CCTE 156-585 exam with actual Check Point CCTE 156-585 Practice Exam Questions. Download 100 percent precise updated and latest 156-585 questions answers and a success rate of 100 percent in the first attempt with high marks.

Page 1 of 2

1. What does SIM handle?

Accelerating packets

FW kernel to SXL kernel hand off

OPSEC connects to SecureXL

Hardware communication to the accelerator

2. What are the main components of Check Point's Security Management architecture?

Management server management database, log server, automation server

Management server, Security Gateway. Multi-Domain Server, SmartEvent Server

Management Server. Log Server. LDAP Server, Web Server

Management server Log server, Gateway server. Security server

3. What is the main SecureXL database for trackingthe acceleration status of traffic?

cphwd_db

cphwd_tmp1

cphwd_dev_conn_table

cphwd_dev_identity_table

4. Which of the following is NOT a vpn debug command used for troubleshooting?

fw ctl debug -m fw + conn drop vm crypt

vpn debug trunc

pclient getdata sslvpn

vpn debug on TDERROR_ALL_ALL=5

5. What is the name of the VPN kernel process?

VPNK

VPND

CVPND

FWK

6. Where will the usermode core files be located?

/var/log/dump/usermode

/var/suroot

SFWDlR/var'log/dump/usermode

SCPDIR/var/log/dump/usermode

7. Which Threat Prevention daemon is the core Threat Emulator, engine and responsible for emulation files and communications with Threat Cloud?

ctasd

inmsd

ted

scrub

8. What acceleration mode utlizes multi-core processing to assist with traffic processing?

CoreXL

SecureXL

HyperThreading

Traffic Warping

9. How can you start debug of the Unified Policy with all possible flags turned on?

fw ctl debug -m UP all

fw ctl debug -m UnifiedPolicy all

fw ctl debug -m fw + UP

fw ctl debug -m UP *

10. Where do Protocol parsers register themselves for IPS?

Passive Streaming Library

Other handlers register to Protocol parser

Protections database

Context Management Infrastructure

Page 2 of 2

11. the difference in debugging a S2S or C2S (using Check Point VPN Client) VPN?

there is no difference

the C2S VPN uses a different VPN deamon and there a second VPN debug

the C2S VPN can not be debugged as it uses different protocols for the key exchange

the C2S client uses Browser based SSL vpn and cant be debugged

12. What does CMI stand for in relation to the Access Control Policy?

Content Matching Infrastructure

Content Management Interface

Context Management Infrastructure

Context Manipulation Interface

13. What command is usually used for general firewall kernel debugging and what is the size of the buffer that is automaticallyenabled when using the command?

fw ctl debug, buffer sizeis 1024 KB

fw ell zdebug. buffer size is 32768 KB

fw dl zdebug, buffer size is 1 MB

fw ctl kdeoug. buffer sizeis 32000 KB

14. 1.What command is usedtofind out which port Multi-Portal has assigned to the Mobile Access Portal?

mpclient getdata sslvpn

netstat -nap | grep mobile

mpclient getdata mobi

netstat getdata sslvpn

15. What is the function of the Core Dump Manager utility?

To generate a new core dump for analysis

To limit the number of core dump files per process as well as the total amount of disk space used by core files

To determine which process is slowing down the system

To send crash information to an external analyzer

16. After kernel debug with "fw ctl debug" you received a huge amount of information It was saved in a very large file that is difficult to open and analyze with standard text editors Suggest a solution to solve this issue.

Use "fw ctl zdebug' because of 1024KB buffer size

Divide debug information into smaller files Use "fw ctl kdebug -f -o "filename" -m 25 - s "1024"

Reduce debug buffer to 1024KB and run debug for several times

Use Check Point InfoView utility to analyze debug output

17. Select the technology that does the following actions

- provides reassembly via streaming for TCP

- handles packet reordering and congestion

- handles payload overlap

- provides consistent stream of data to protocol parsers

Passive Streaming Library

Context Management

Pre-Protocol Parser

fwtcpstream

18. What is NOT a benefit of the fw ctl zdebug command?

Cannot be used to debug additional modules

Collect debug messages from the kernel

Clean the buffer

Automatically allocate a 1MB buffer

19. The Check Pom! Firewall Kernel is the core component of the Gaia operating system and an integral part of the traffic inspection process There are two procedures available for debugging the firewall kernel

Which procedure/command is used for troubleshooting packet drops and other kernel activites while using minimal resources (1 MB buffer)?

fw ctl zdebug

fw ctl debug/kdebug

fwk ctl debug

fw debug ctl