Check Point Certified Troubleshooting Expert - R81.20

Question 1

What is NOT monitored as a PNOTE by ClusterXL?

A. VPND

B. TED

C. RouteD

D. Policy

Correct Answer: B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 2

You receive reports from multiple users that they cannot browse Upon further discovery you identify that Identity Awareness cannot identify the users properly and apply the configuredAccess Roles What commands you can use to troubleshoot all identity collectors and identity providers from the command line?

A. on the gateway: pdp debug set IDC all IDP all

B. on the gateway: pdp debug set AD all and IDC all

C. on the management: pdp debug set all

D. on the management: pdp debug on IDC all

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 3

Which of the following file is commonly associated with troubleshooting crashes on a system such as the Security Gateway?

A. fw monitor

B. core dump

C. tcpdump

D. CPMIL dump

Correct Answer: B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 4

You modified kernel parameters and after rebooting the gateway, a lot of production traffic gets dropped and the gateway acts strangely What should you do"?

A. Remove all kernel parameters from fwkem.conf and reboot

B. Run command fw ctl set int fw1_kernel_all_disable=1

C. run fw unloadlocal to remove parameters from kernel

D. Restore fwkem.conf from backup and reboot the gateway

Correct Answer: D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 5

RAD is initiated when Application Control and URL Filtering blades are active on the Security Gateway. What is the purpose of the following RAD configuration file $FWDIR/conf/rad_settings.C?

A. This file contains RAD proxy settings

B. This file contains all the host name settings for the online application detection engine

C. This file contains the information on how the Security Gateway reaches the Security Management Server's RAD service for Application Control and URL Filtering

D. This file contains the location information for Application Control and/or URL Filtering entitlements

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 6

What are the three main component of Identity Awareness?

A. User, Active Directory and Access Role

B. Identity Awareness Blade on Security Gateway, User Database on Security Management Server and Active Directory

C. Client, SMS and Secure Gateway

D. Identity Source Identity Server (POP) and Identity Enforcement (PEP)

Correct Answer: D

Question 7

What command is used to find out which port Multi-Portal has assigned to the Mobile Access Portal?

A. mpclient getdata mobi

B. mpcient getdata sslvpn

C. netstat -nap | grep mobile

D. netstat getdata sslvpn

Correct Answer: B

Question 8

The Check Point Firewall Kernel is the core component of the Gaia operating system and an integral part of traffic inspection process. There are two procedures available for debugging the firewall kernel. Which procedure/command is used for detailed troubleshooting and needs more resources?

A. fw debug/kdebug

B. fw ctl debug/kdebug

C. fw debug/kdebug ctl

D. fw ctl zdebug

Correct Answer: B

CheckPoint Check Point Certified Troubleshooting Expert - R81.20 - 156-587 Exam Practice Test

Latest Update

Useful Links

Contact Us