CompTIA
Checkpoint
ISC
HP
Dell
EC-Council
EXIN
Fortinet
ITIL®
Juniper
PMI
Microsoft
VMware
Avaya
Google
Salesforce
Amazon
Palo Alto Networks
Certiport
ISC2
All Vendors
  2. Home
  3. Exams
  4. Checkpoint
  5. 156-587

Free 156-587 Exam Braindumps (page: 2)

Page 1 of 21
PDF with 78 Questions

You run a free-command on a gateway and notice that the Swap column is not zero Choose the best answer

  1. Utilization of ram is high and swap file had to be used
  2. Swap file is used regularly because RAM memory is reserved for management traffic
  3. Swap memory is used for heavy connections when RAM memory is full
  4. Its ole Swap is used to increase performance

Answer(s): A



You modified kernel parameters and after rebooting the gateway, a lot of production traffic gets dropped and the gateway acts strangely What should you do"?

  1. Run command fw ctl set int fw1_kernel_all_disable=1
  2. Restore fwkem.conf from backup and reboot the gateway
  3. run fw unloadlocal to remove parameters from kernel
  4. Remove all kernel parameters from fwkem.conf and reboot

Answer(s): B

Explanation:

If you have modified kernel parameters (in fwkern.conf, for example) and the gateway starts dropping traffic or behaving abnormally after a reboot, the best practice is to restore the original or a known-good configuration from backup. Then, reboot again so that the gateway loads the last known stable settings.

Option A (fw ctl set int fw1_kernel_all_disable=1) is not a standard or documented method for "undoing" all kernel tweaks.

Option B (Restore fwkem.conf from backup and reboot the gateway) is the correct and straightforward approach.

Option C (fw unloadlocal) removes the local policy but does not revert custom kernel parameters that have already been loaded at boot.

Option D (Remove all kernel parameters from fwkem.conf and reboot) might help in some cases, but you risk losing other beneficial or necessary parameters if there were legitimate custom settings. Restoring from a known-good backup is safer and more precise.

Hence, the best answer:
"Restore fwkem.conf from backup and reboot the gateway."

Check Point Troubleshooting Reference sk98339 ­ Working with fwkern.conf (kernel parameters) in Gaia OS.

sk92739 ­ Advanced System Tuning in Gaia OS.

Check Point Gaia Administration Guide ­ Section on kernel parameters and system tuning.

Check Point CLI Reference Guide ­ Explanation of using fw ctl, fw unloadlocal, and relevant troubleshooting commands.



What process monitors terminates, and restarts critical Check Point processes as necessary?

  1. CPM
  2. FWD
  3. CPWD
  4. FWM

Answer(s): C

Explanation:

CPWD (Check Point WatchDog) is the process that monitors, terminates (if necessary), and restarts critical Check Point processes (e.g., FWD, FWM, CPM) when they stop responding or crash.

CPM (Check Point Management process) is a process on the Management Server responsible for the web-based SmartConsole connections, policy installations, etc.

FWD (Firewall Daemon) handles logging and communication functions in the Security Gateway.

FWM (FireWall Management) is an older reference to the management process on the Management Server for older versions.

Therefore, the best answer is CPWD.

Check Point Troubleshooting Reference sk97638: Check Point WatchDog (CPWD) process explanation and commands.

R81.20 Administration Guide ­ Section on CoreXL, Daemons, and CPWD usage.

sk105217: Best Practices ­ Explains system processes, how to monitor them, and how CPWD is utilized.



When dealing with monolithic operating systems such as Gaia where are system calls initiated from to achieve a required system level function?

  1. Kernel Mode
  2. Slow Path
  3. Medium Path
  4. User Mode

Answer(s): A






Post your Comments and Discuss Checkpoint 156-587 exam with other Community members: