Ultimate Guide to Prepare Free CheckPoint 156-585 Exam Questions & Answer [Q33-Q50] : Best Free Exam Guide : http://free.exams4sures.com

NEW QUESTION 33
John has renewed his NGTX License but he gets an error (contract for Anti-Bot expired). He wants to check the subscription status on the CU of the gateway, what command can he use for this?

cpstat antimalware -I subscription _status

fw monitor license status

fwm lie print

show license status

NEW QUESTION 34
Which daemon governs the Mobile Access VPN blade and works with VPND to create Mobile Access VPN connections? It also handles interactions between HTTPS and the Multi-Portal Daemon.

Connectra VPN Daemon – cvpnd

Mobile Access Daemon – MAD

mvpnd

SSL VPN Daemon – sslvpnd

NEW QUESTION 35
Which kernel process is used by Content Awareness to collect the data from contexts?

dlpda

PDP

cpemd

CMI

NEW QUESTION 36
What process monitors, terminates, and restarts critical Check Point processes as necessary?

CPWD

CPM

FWD

FWM

NEW QUESTION 37
Which of the following inputs is suitable for debugging HTTPS inspection issues?

vpn debug cptls on

fw ctl debug -m fw + conn drop cptls

fw diag debug tls enable

fw debug tls on TDERROR_ALL_ALL=5

NEW QUESTION 38
You are trying to establish a VPN tunnel between two Security Gateways but fail. What initial steps will you make to troubleshoot the issue

capture traffic on both tunnel members and collect debug of IKE and VPND daemon

capture traffic on both tunnel members and collect kernel debug for fw module with vm, crypt, conn and drop flags, then collect debug of IKE and VPND daemon

collect debug of IKE and VPND daemon and collect kernel debug for fw module with vm, crypt, conn and drop flags

capture traffic on both tunnel members and collect kernel debug for fw module with vm, crypt, conn and drop flags

NEW QUESTION 39
Which one of the following is NOT considered a Solr core partition:

CPM_0_Revisions

CPM_Global_A

CPM_Gtobal_R

CPM_0_Disabled

NEW QUESTION 40
What is the main SecureXL database for tracking acceleration status of traffic?

cphwd_db

cphwd_tmp1

cphwd_dev_conn_table

cphwd_dev_identity_table

NEW QUESTION 41
What is the benefit of running “vpn debug trunc over “vpn debug on”?

“vpn debug trunc” purges ike.elg and vpnd elg and creates limestarnp while starting ike debug and vpn debug

“vpn debug trunc*truncates the capture hence the output contains minimal capture

“vpn debug trunc* provides verbose capture

No advantage one over the other

NEW QUESTION 42
In Security Management High Availability, if the primary and secondary managements, running the same version of R80.x, are in a state of ‘Collision’, how can this be resolved?

Administrator should manually synchronize the servers using SmartConsole

The Collision state does not happen in R80.x as the synchronizing automatically on every publish action

Reset the SIC of the secondary management server

Run the command ‘fw send synch force’ on the primary server and ‘fw get sync quiet’ on the secondary server

NEW QUESTION 43
Check Point’s PostgreSQL is partitioned into several relational database domains. Which domain contains network objects and security policies?

User Domain

System Domain

Global Domain

Log Domain

NEW QUESTION 44
Vanessa is reviewing ike.elg file to troubleshoot failed site-to-site VPN connection After sending Mam Mode Packet 5 the response from the peer is PAYLOAD-MALFORMED” What is the reason for failed VPN connection?

The authentication on Phase 1 is causing the problem.
Pre-shared key on local gateway encrypted by the hash algorithm created in Packet 3 and Packet 4 doesn’t match with the hash on the peer gateway generated by encrypting its pre-shared key

The authentication on Phase 2 is causing the problem
Pre-shared key on local gateway encrypted by the hash algorithm created in Packets 1 and 2 doesn’t match with the hash on the peer gateway generated by encrypting its pre-shared key

The authentication on Quick Mode is causing the problem
Pre-shared key on local gateway encrypted by the hash algorithm created in Packets 3 and 4 doesn’t match with the hash on the peer gateway generated by encrypting its pre-shared key

The authentication on Phase 1 is causing the problem
Pre-shared key on local gateway encrypted by the hash algorithm doesn’t match with the hash on the peer gateway generated by encrypting its pre-shared key created in Packet 1 and Packet 2

NEW QUESTION 45
PostgreSQL is a powerful, open source relational database management system Check Point offers a command for viewing the database to interact with Postgres interactive shell Which command do you need to enter the PostgreSQL interactive shell?

psql_client cpm postgres

mysql_client cpm postgres

psql_c!ieni postgres cpm

mysql -u root

NEW QUESTION 46
Check Point Threat Prevention policies can contain multiple policy layers and each layer consists of its own Rule Base Which Threat Prevention daemon is used for Anti-virus?

in.emaild.mta

in.msd

ctasd

in emaild

NEW QUESTION 47
Which Threat Prevention Daemon is the core Threat Emulation engine and responsible for emulation files and communications with Threat Cloud?

ctasd

in.msd

ted

scrub

NEW QUESTION 48
What is the main SecureXL database for trackingthe acceleration status of traffic?

cphwd_db

cphwd_tmp1

cphwd_dev_conn_table

cphwd_dev_identity_table

NEW QUESTION 49
For TCP connections, when a packet arrives at the Firewall Kernel out of sequence or fragmented, which layer of IPS corrects this to allow for proper inspection?

Passive Streaming Library

Protections

Protocol Parsers

Context Management

NEW QUESTION 50
Jenna has to create a VPN tunnel to a CISCO ASA but has to set special property to renegotiate the Phase 2 tunnel after 10 MB of transferee1 data.This can not be configured in the smartconsole, so how can she modify this property?

using GUIDBEDIT located in same directoryas Smartconsole on the Windows client

she need to install GUIDBEDIT which can be downloaded from the Usercenter

she need to run GUIDBEDIT from CLISH which opens a graphical window on the smartcenter

this cant be done anymore as GUIDBEDIT is not supported in R80 anymore