Cisco®
CompTIA
Checkpoint
ISC
EC-Council
EXIN
Fortinet
ITIL®
Juniper
PMI
Microsoft
VMware
Avaya
Google
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk®
Scrum
All Vendors
  2. Home
  3. Exams
  4. Checkpoint
  5. 156-585

Free 156-585 Exam Braindumps (page: 5)

Page 4 of 19
PDF with 114 Questions

The management configuration stored in the Postgres database is partitioned into several relational database Domains, like - System, User, Global and Log Domains. The User Domain stores the network objects and security policies. Which of the following is stored in the Log Domain?

  1. Configuration data of Log Servers and saved queries for applications
  2. Active Logs received from Security Gateways and Management Servers
  3. Active and past logs received from Gateways and Servers
  4. Log Domain is not stored in Postgres database, it is part of Solr indexer only

Answer(s): D



Which process is responsible for the generation of certificates?

  1. cpm
  2. cpca
  3. dbsync
  4. fwm

Answer(s): B



the difference in debugging a S2S or C2S (using Check Point VPN Client) VPN?

  1. there is no difference
  2. the C2S VPN uses a different VPN deamon and there a second VPN debug
  3. the C2S VPN can not be debugged as it uses different protocols for the key exchange
  4. the C2S client uses Browser based SSL vpn and cant be debugged

Answer(s): D



The two procedures available for debugging in the firewall kernel are:
i) fw ctl zdebug
ii) fw ctl debug/kdebug

Choose the correct statement explaining the differences in the two

  1. (i) Is used for general debugging, has a small buffer and is a quick way to set kernel debug flags to get an output via command line
    whereas (11) is useful when there is a need for detailed debugging and requires additional steps to set the buffer and get an output via command line
  2. (i) is used to debug the access control policy only, however (n) can be used to debug a unified policy
  3. (i) is used to debug only issues related to dropping of traffic, however (n) can be used for any firewall issue including NATing,
    clustering etc.
  4. (i) is used on a Security Gateway, whereas (11) is used on a Security Management Server

Answer(s): A






Post your Comments and Discuss Checkpoint 156-585 exam with other Community members: