Free 156-587 Exam Braindumps
Check Point Certified Troubleshooting Expert - R81.20 Questions 46–50 (page: 11)

Updated On: 10-Feb-2026

What components make up the Context Management Infrastructure?

  1. CPMI and FW Loader
  2. CPX and FWM
  3. CPM and SOLR
  4. CMI Loader and Pattern Matcher

Answer(s): D



What command would you run to verify the communication between the Security Gateway and the Identity Collector?

  1. fw ctl debug -m IDAPI
  2. pdp connections idc
  3. fw ctl debug -m fw + nac
  4. adlog

Answer(s): B



How does Identity Collector connect to Windows Server?

  1. ADQuery is needed for connection
  2. LDAP connection
  3. It uses a PDP demon to connect
  4. via Windows API

Answer(s): D



What function receives the AD log event information?

  1. FWD
  2. CPD
  3. PEP
  4. ADLOG

Answer(s): D

Explanation:

The ADLOG function receives the AD log event information from the Domain Controllers. The ADLOG function is part of the Identity Awareness feature that enables the Security Gateway to identify users and machines in the network and enforce Access Control policy rules based on their identities. The ADLOG function uses the AD Query (ADQ) method to connect to the Active Directory Domain Controllers using WMI and subscribe to receive Security Event logs that are generated when users perform login. The ADLOG function then extracts the user and machine information that maps to an

IP address from the event logs and sends it to the PEP function, which enforces the policy based on the identity information.


Reference:

1: Identity Awareness AD Query - Check Point Software

2: Identity Logging - Frequently Asked Questions - Check Point Software

3: Support, Support Requests, Training ... - Check Point Software



You receive complains that Guest Users cannot login and use the Guest Network which is configured with Access Role of Guest Users. You need to verity the Captive Portal configuration.
Where can you find the config file?

  1. on the gateway at $NACPORTAL_ HOME/conf/httpd_ nac.conf
  2. on the management at SCPNAC_ HOME/conf/httpd_ nac.conf
  3. on the management at SNACPORTAL_ HOME/conf/httpd_ nac.conf
  4. on the gateway at $CPNAC_ HOME/conf/httpd_ nac.conf

Answer(s): A



Viewing page 11 of 23
Viewing questions 51 - 55 out of 109 questions


Post your Comments and Discuss Checkpoint 156-587 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!