• ホーム
  • ブログ
  • オンライン問題で最適な156-587試験練習問題（最新の101問題) [Q27-Q52]

オンライン問題で最適な156-587試験練習問題（最新の101問題) [Q27-Q52]

Share

オンライン問題で最適な156-587試験練習問題（最新の101問題)

練習問題156-587素晴らしい練習用のCheck Point Certified Troubleshooting Expert - R81.20テスト問題

質問 # 27
In some scenarios it is very helpful to use advanced Linux commands for troubleshooting purposes. Which command displays information about resource utilization for running processes and shows additional information for core utilization and memory?

  • A. cptop
  • B. vmstat
  • C. mpstat
  • D. top

正解：D

解説：
The top command is a Linux command that displays information about resource utilization for running processes and shows additional information for core utilization and memory. The top command provides a dynamic real-time view of the system, showing the processes that are consuming the most CPU, memory, and other resources. The top command also shows the total number of processes, the system load average, the uptime, and the CPU usage by user, system, and idle. The top command can be customized by using various options and interactive commands to change the display, sort the processes, filter the output, and kill processes.
The other commands are incorrect because:
* B. vmstat is a Linux command that displays information about the virtual memory, CPU, disk, and system activity. It does not show information about individual processes or core utilization.
* C. cptop is a Check Point command that displays information about the firewall kernel activity, such as the number of connections, packets, drops, and rejects. It does not show information about other processes or memory usage.
* D. mpstat is a Linux command that displays information about the CPU utilization by each processor or core. It does not show information about processes or memory usage.
References:
* top(1) - Linux manual page
* vmstat(8) - Linux manual page
* cptop - Check Point Software
* mpstat(1) - Linux manual page


質問 # 28
The two procedures available for debugging in the firewall kernel are
i. fw ctl zdebug
ii. fw ctl debug/kdebug
Choose the correct statement explaining the differences in the two

  • A. (i) is used to debug only issues related to dropping of traffic, however (ii) can be used for any firewall issue including NATing, clustering etc.
  • B. (i) is used for general debugging, has a small buffer and is a quick way to set kernel debug flags to getan output via command line whereas (ii) is useful when there is a need for detailed debugging and requires additional steps to set the buffer and get an output via command line
  • C. (i) is used on a Security Gateway, whereas (ii) is used on a Security Management Server
  • D. (i) is used to debug the access control policy only, however (ii) can be used to debug a unified policy

正解：B

解説：
The correct statement explaining the differences between the two procedures for debugging in the firewall kernel is D. (i) is used for general debugging, has a small buffer and is a quick way to set kernel debug flags to get an output via command line whereas (ii) is useful when there is a need for detailed debugging and requires additional steps to set the buffer and get an output via command line.
The command fw ctl zdebug is a shortcut command that sets the kernel debug flags to a predefined value and prints the debug output to the standard output. It is useful for general debugging of common issues, such as traffic drops, NAT, VPN, or clustering. It has a small buffer size and does not require additional steps to start or stop the debugging. However, it has some limitations, such as it cannot be used with SecureXL, it cannot filter the output by chain modules, and it cannot save the output to a file12.
The command fw ctl debug is a command that allows the administrator to set the kernel debug flags to a custom value and specify the chain modules to debug. It is useful for detailed debugging of specific issues, such as policy installation, CoreXL, or Identity Awareness. It has a larger buffer size and can save the output to a file. However, it requires additional steps to start and stop the debugging, such as setting the buffer size, clearing the buffer, dumping the buffer, and resetting the debug flags12.
The command fw ctl kdebug is a command that is used in conjunction with fw ctl debug to dump the kernel debug buffer to the standard output or to a file. It is part of the procedure (ii) for detailed debugging in the firewall kernel12.
The other statements are not correct or relevant for explaining the differences between the two procedures for debugging in the firewall kernel. The command fw ctl zdebug can be used to debug more than just the access control policy, and the command fw ctl debug/kdebug can be used to debug more than just the unified policy. Both commands can be used on both the Security Gateway and the Security Management Server, depending on the issue to be debugged12.
References: Check Point Processes and Daemons3, (CCTE) - Check Point Software2
1: https://sc1.checkpoint.com/documents/R81.10/WebAdminGuides/EN/CP_R81.
10_AdvancedTechnicalReferenceGuide/html_frameset.htm 2: https://www.checkpoint.com/downloads
/training/DOC-Training-Data-Sheet-CCTE-R81.10-V1.0.pdf 3: https://supportcenter.checkpoint.com
/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk97638


質問 # 29
What command(s) will turn off all vpn debug collection?

  • A. vpn debug off
  • B. vpn debug -a off
  • C. fw ctl debug 0
  • D. vpn debug off and vpn debug ikeoff

正解：D


質問 # 30
What are the three main component of Identity Awareness?

  • A. Identity Source, Identity Server (PDP) and Identity Enforcement (PEP)
  • B. User, Active Directory and Access Role
  • C. Client, SMS and Secure Gateway
  • D. Identity Awareness Blade on Security Gateway, User Database on Security Management Server and Active Directory

正解：A


質問 # 31
Which of the following file is commonly associated with troubleshooting crashes on a system such as the Security Gateway?

  • A. core dump
  • B. fw monitor
  • C. CPMIL dump
  • D. tcpdump

正解：A


質問 # 32
What is the function of the Core Dump Manager utility?

  • A. To send crash information to an external analyzer
  • B. To determine which process is slowing down the system
  • C. To generate a new core dump for analysis
  • D. To limit the number of core dump files per process as well as the total amount of disk space used by core files

正解：D

解説：
The Core Dump Manager (CDM) is a utility that helps manage core dump files on Check Point systems. Its main functions include:
Limiting file size and number: CDM can be configured to limit the size of individual core dump files and the total amount of disk space used for core dumps. This prevents core dumps from filling up valuable disk space.
Compression: CDM can compress core dump files to reduce their storage size. This is particularly helpful when dealing with large core dumps.
Process filtering: CDM allows you to specify which processes should be allowed to generate core dumps. This can help prevent unnecessary core dumps from being created.
Remote collection: CDM can be configured to send core dump files to a remote server for analysis. This is useful in environments where direct access to the system generating the core dump is limited.
By using CDM, you can effectively manage core dump files and ensure that they are not overwhelming your system's resources.


質問 # 33
You are using the Identity Collector with Identity Awareness in large environment. Users report that they cannot access resources on Internet. You identify that the traffic is matching the cleanup rule instead of the proper rule with Access Roles using the IDC. How can you check if IDC is working?

  • A. pep debug idc on
  • B. ad query | debug on
  • C. pdp debug set IDP all all
  • D. pdp connections idc

正解：D


質問 # 34
Check Point Threat Prevention policies can contain multiple policy layers and each layer consists of its own Rule Base.
Which Threat Prevention daemon is used for Anti-virus?

  • A. in.emaild
  • B. in.emaild.mta
  • C. ctasd
  • D. in.msd

正解：C

解説：
ctasd: This daemon is responsible for Threat Emulation, Anti-Bot, Application Control, and various other security features, including Anti-virus. From Check Point R80.10 onwards, Anti-virus functionality is integrated within ctasd.


質問 # 35
What process monitors terminates, and restarts critical Check Point processes as necessary?

  • A. FWM
  • B. CPM
  • C. FWD
  • D. CPWD

正解：D

解説：
CPWD (Check Point WatchDog) is the process that monitors, terminates (if necessary), and restarts critical Check Point processes (e.g., FWD, FWM, CPM) when they stop responding or crash.
CPM (Check Point Management process) is a process on the Management Server responsible for the web-based SmartConsole connections, policy installations, etc.
FWD (Firewall Daemon) handles logging and communication functions in the Security Gateway.
FWM (FireWall Management) is an older reference to the management process on the Management Server for older versions.
Therefore, the best answer is CPWD.
Check Point Troubleshooting Reference
sk97638: Check Point WatchDog (CPWD) process explanation and commands.
R81.20 Administration Guide - Section on CoreXL, Daemons, and CPWD usage.
sk105217: Best Practices - Explains system processes, how to monitor them, and how CPWD is utilized.


質問 # 36
How can you start debug of the Unified Policy with all possible flags turned on?

  • A. fw ctl debug -m UP
  • B. fw ctl debug -m fw + UP
  • C. fw ctl debuq -m UnifiedPolicv all
  • D. fw ctl debug -m UP all

正解：D


質問 # 37
What process monitors terminates, and restarts critical Check Point processes as necessary?

  • A. FWM
  • B. CPM
  • C. FWD
  • D. CPWD

正解：D

解説：
* CPWD (Check Point WatchDog) is the process that monitors, terminates (if necessary), and restarts critical Check Point processes (e.g., FWD, FWM, CPM) when they stop responding or crash.
* CPM (Check Point Management process) is a process on the Management Server responsible for the web-based SmartConsole connections, policy installations, etc.
* FWD (Firewall Daemon) handles logging and communication functions in the Security Gateway.
* FWM (FireWall Management) is an older reference to the management process on the Management Server for older versions.
Therefore, the best answer is CPWD.
Check Point Troubleshooting References
* sk97638: Check Point WatchDog (CPWD) process explanation and commands.
* R81.20 Administration Guide - Section on CoreXL, Daemons, and CPWD usage.
* sk105217: Best Practices - Explains system processes, how to monitor them, and how CPWD is utilized.


質問 # 38
Which of these packet processing components stores Rule Base matching state-related information?

  • A. Classifiers
  • B. Observers
  • C. Manager
  • D. Handlers

正解：B

解説：
The Terraform Registry allows any user to publish and share modules. Published modules support versioning, automatically generate documentation, allow browsing version histories, show examples and READMEs, and more. Public modules are managed via Git and GitHub, and publishing a module takes only a few minutes.
Once a module is published, releasing a new version of a module is as simple as pushing a properly formed Git tag1.
References = The information can be verified from the Terraform Registry documentation on Publishing Modules provided by HashiCorp Developer1.


質問 # 39
VPN issues may result from misconfiguration, communication failure, or incompatible default configurations between peers. Which basic command syntax needs to be used for troubleshooting Site-to-Site VPN issues?

  • A. fw debug truncon
  • B. vpn debug truncon
  • C. vpn truncon debuq
  • D. cp debug truncon

正解：B


質問 # 40
Check Point provides tools & commands to help you to identify issues about products and applications.
Which Check Point command can help you to display status and statistics information for various Check Point products and applications?

  • A. fwstat
  • B. cpstat
  • C. CPstat
  • D. CPview

正解：B

解説：
The correct Check Point command to display status and statistics information for various Check Point products and applications is cpstat. This command provides a dynamic real-time view of the system, showing the information such as the number of connections, packets, drops, CPU usage, memory usage, disk space, license status, and blade status. The cpstat command can be customized by using various options and flags to specify the product, the interval, the fields, and the format of the output. For example, to display the status and statistics of the firewall module every 5 seconds, the command would be:
cpstat fw -f all -i 5
The other commands are incorrect because:
* A. CPview is a Check Point tool that displays information about the system performance, such as the CPU, memory, disk, network, and firewall. It does not show information about other products and applications, such as VPN, Identity Awareness, Anti-Virus, etc.
* C. fwstat is not a valid command. The correct command is fw ctl pstat, which displays information about the firewall kernel, such as the number of connections, packets, drops, memory, and synchronization. It does not show information about other products and applications, such as VPN, Identity Awareness, Anti-Virus, etc.
* D. CPstat is not a valid command. The correct command is cpstat, which is case-sensitive.
References:
* cpstat - Check Point Software
* CPView Utility
* fw ctl pstat - Check Point Software
* (CCTE) - Check Point Software


質問 # 41
What is the most efficient way to read an IKEv2 Debug?

  • A. any xml editor
  • B. IKEview
  • C. vi on the cti
  • D. notepad++

正解：B


質問 # 42
What is the name of the VPN kernel process?

  • A. VPNK
  • B. FWK
  • C. VPND
  • D. CVPND

正解：C


質問 # 43
You were asked by security team to debug Mobile Access VPN. What processes will you debug?

  • A. VPND and IKED
  • B. IKED
  • C. HTTPD and CPVND
  • D. SNX daemon

正解：C


質問 # 44
Troubleshooting issues with Mobile Access requires the following:

  • A. Standard VPN debugs and packet captures on Security Gateway, debugs of 'cvpnd' process on Security Management
  • B. Debug logs of FWD captured with the command - 'fw debug fwd on
    TDERROR_MOBILE_ACCESS=5'
  • C. Standard VPN debugs, packet captures and debugs of cvpnd1 process on Security Gateway
  • D. 'ma_vpnd' process on Security Gateway

正解：C


質問 # 45
What is the correct syntax to turn a VPN debug on and create new empty debug files?

  • A. vpndebug trunc on
  • B. vpn debuq trunkon
  • C. vpn debug truncon
  • D. vpn kdebug on

正解：C


質問 # 46
Which of the following is a component of the Context Management Infrastructure used to collect signatures in user space from multiple sources, such as Application Control and IPS, and compiles them together into unified Pattern Matchers?

  • A. PSL - Passive Signature Loader
  • B. cpas
  • C. CMI Loader
  • D. Context Loader

正解：D

解説：


質問 # 47
When viewing data for CPMI objects in the Postgres database, what table column should be selected to query for the object instance?

  • A. CPM Global M
  • B. GuiDBedit
  • C. fwset
  • D. CpmiHostCkp

正解：D

解説：
The CpmiHostCkp table in the Postgres database contains the data for CPMI objects, such as gateways, clusters, and servers. The table column that should be selected to query for the object instance is the objid column, which is the primary key of the table and uniquely identifies each object. The objid column can be used to join with other tables that reference CPMI objects, such as CpmiClusterMember, CpmiCluster, and CpmiServer. The objid column can also be used to retrieve the object name, IP address, type, and other attributes from the CpmiHostCkp table itself. Reference:
Check Point Database Tool (GuiDBedit Tool) - Section: How to use the Check Point Database Tool (GuiDBedit Tool) - Subsection: How to view the data in the database Check Point Certified Troubleshooting Expert (CCTE) - Exam Topics - Module 6: Advanced Management Server Troubleshooting
[Check Point R81 Database Schema] - Section: CPMI Tables - Subsection: CpmiHostCkp Table


質問 # 48
In some scenarios it is very helpful to use advanced Linux commands for troubleshooting purposes. Which command displays information about resource utilization for running processes and shows additional information for core utilization and memory?

  • A. cptop
  • B. vmstat
  • C. mpstat
  • D. top

正解：D


質問 # 49
When a user space process or program suddenly crashes, what type of file is created for analysis

  • A. coredebug
  • B. kernel_memory_dump dbg
  • C. core dump
  • D. core analyzer

正解：C

解説：
When a user space process crashes unexpectedly, the operating system often creates a core dump file. This file is a snapshot of the process's memory at the time of the crash, including information such as:
Program counter: This indicates where the program was executing when it crashed.
Stack pointer: This shows the function call stack, which can help trace the sequence of events leading to the crash.
Memory contents: This includes the values of variables and data structures used by the process.
Register values: This shows the state of the processor registers at the time of the crash.
Core dump files can be analyzed using debuggers like GDB to understand the cause of the crash.
Why other options are incorrect:
B . kernel_memory_dump dbg: This refers to a kernel memory dump, which is generated when the operating system kernel itself crashes.
C . core analyzer: This is a tool used to analyze core dump files, not the file itself.
D . coredebug: This is not a standard term for any type of crash dump file.
Check Point Troubleshooting Reference:
Check Point's documentation mentions core dumps in the context of troubleshooting various processes, such as fwd (firewall) and cpd (Check Point daemon). You can find information on enabling core dumps and analyzing them in the Check Point administration guides and knowledge base articles.


質問 # 50
For Identity Awareness, what is the PDP process?

  • A. UserAuth Database
  • B. Identity server
  • C. Log Sifter
  • D. Captive Portal Service

正解：B


質問 # 51
What is the buffer size set by the fw ctl zdebug command?

  • A. 8 MB
  • B. 8GB
  • C. 1 GB
  • D. 1 MB

正解：D


質問 # 52
......

リアルな156-587試験別格な練習試験問題：https://www.goshiken.com/CheckPoint/156-587-mondaishu.html

100%合格率でリアルな156-587試験成功ゲット：https://drive.google.com/open?id=19yJa0HqDNHKCitikhc0Wx-JZYN8qK7ze

関するブログ

もっと
156-587無料問題集