CheckPoint 156-587豪華セット学習ガイドにはオンライン試験エンジン
156-587問題集レビュー専門クイズ学習材料
質問 # 31
What function receives the AD log event information?
- A. PEP
- B. FWD
- C. CPD
- D. ADLOG
正解：D
質問 # 32
What are the main components of Check Point's Security Management architecture?
- A. Management server. Security Gateway. Multi-Domain Server. SmartEvent Server
- B. Management server, management database, log server, automation server
- C. Management server, Log server. Gateway server. Security server
- D. Management server. Log Server, LDAP Server, Web Server
正解：B
質問 # 33
URL Filtering is an essential part of Web Security in the Gateway. For the Security Gateway to perform a URL lookup when a client makes a URL request, where is the sync-request forwarded from if a sync-request is required?
- A. RAD Kernel Space
- B. URLF Kernel Client
- C. RAD User Space
- D. URLF Online Service
正解：D
質問 # 34
Which of the following would NOT be a flag when debugging a unified policy?
- A. tls
- B. rulebase
- C. clob
- D. connection
正解：A
質問 # 35
What is the simplest and most efficient way to check all dropped packets in real time?
- A. Smartlog
- B. fw ctl zdebug + drop in expert mode
- C. cat /dev/fw1/log in expert mode
- D. tail -f $FWDIR/log/fw.log |grep drop in expert mode
正解：B
質問 # 36
In Check Point's Packet Processing Infrastructure, what is the role of Observers?
- A. They store Rule Base matching state related information
- B. Observers decide whether or not to publish a CLOB to the Security Policy
- C. Observers monitor the state of Check Point gateways and report it to the security manager
- D. Observers attach object IDs to traffic
正解：B
解説：
質問 # 37
You need to run a kernel debug over a longer period of time as the problem occurs only once or twice a week. Therefore, you need to add a timestamp to the kernel debug and write the output to a file but you can't afford to fill up all the remaining disk space and you only have 10 GB free for saving the debugs. What is the correct syntax for this?
- A. fw ctl kdebug -T -f -m 10 -s 1000000 -o debugfilename
- B. fw ctl debug -T -f -m 10 -s 1000000 -o debugfilename
- C. fw ctl kdebug -T -f -m 10 -s 1000000 > debugfilename
- D. fw ctl kdebug -T -m 10 -s 1000000 -o debugfilename
正解：A
質問 # 38
Which of the following inputs is suitable for debugging HTTPS inspection issues?
- A. fw ctl debug -m fw + conn drop cptls
- B. fw debug tls on TDERROR_ALL_ALL=5
- C. fw diag debug tls enable
- D. vpn debug cptls on
正解：A
質問 # 39
VPN issues may result from misconfiguration, communication failure, or incompatible default configurations between peers. Which basic command syntax needs to be used for troubleshooting Site-to-Site VPN issues?
- A. cp debug truncon
- B. vpn debug truncon
- C. vpn truncon debuq
- D. fw debug truncon
正解：B
質問 # 40
Check Point Threat Prevention policies can contain multiple policy layers and each layer consists of its own Rule Base.
Which Threat Prevention daemon is used for Anti-virus?
- A. in.emaild
- B. in.msd
- C. ctasd
- D. in.emaild.mta
正解：C
解説：
ctasd: This daemon is responsible for Threat Emulation, Anti-Bot, Application Control, and various other security features, including Anti-virus. From Check Point R80.10 onwards, Anti-virus functionality is integrated within ctasd.
質問 # 41
What are the three main component of Identity Awareness?
- A. Identity Awareness Blade on Security Gateway, User Database on Security Management Server and Active Directory
- B. User, Active Directory and Access Role
- C. Client, SMS and Secure Gateway
- D. Identity Source, Identity Server (PDP) and Identity Enforcement (PEP)
正解：D
質問 # 42
What information does the doctor-log script supply?
- A. Logging rates. Logging Directories, List of troubleshooting tips
- B. Current and daily average logging rates. Indexing status, Size
- C. Repair options. Logging Rates, Logging Directories
- D. Logging errors. Exceptions, Repair options
正解：B
質問 # 43
What is the most efficient way to read an IKEv2 Debug?
- A. notepad++
- B. any xml editor
- C. vi on the cl
- D. IKE view
正解：D
解説：
https://support.checkpoint.com/results/sk/sk30994
質問 # 44
You are seeing output from the previous kernel debug. What command should you use to avoid that?
- A. fw ctl zdebug disable
- B. fw ctl debug = 0
- C. fw ctl debug 0
- D. fw ctl clean buffer = 0
正解：C
解説：
To reset all debug flags and enable only the default debug flags in all kernel modules:
fw ctl debug 0
https://sc1.checkpoint.com/documents/R80.30/WebAdminGuides/EN/CP_R80.30_QoS_AdminGu ide/html_frameset.htm?topic=documents/R80.30/WebAdminGuides/EN/CP_R80.30_QoS_Admin Guide/202665
質問 # 45
The management configuration stored in the Postgres database is partitioned into several relational database domains. What is the purpose of the Global Domain?
- A. This domain is used as the global database for MDSM and contains global objects and policies.
- B. Global Domains is used by the IPS software blade to map the IDs to the corresponding countries according to the IpToCountry.csv file.
- C. This domain is used as the global database to back up the objects referencing the corresponding object attributes from the System Domain.
- D. This domain is used as the global database to track the changes made by multiple administrators on the same objects prior to publishing.
正解：A
質問 # 46
Which of these packet processing components stores Rule Base matching state-related information?
- A. Manager
- B. Handlers
- C. Observers
- D. Classifiers
正解：B
質問 # 47
The two procedures available for debugging in the firewall kernel are
i. fw ctl zdebug
ii. fw ctl debug/kdebug
Choose the correct statement explaining the differences in the two
- A. (i) is used for general debugging, has a small buffer and is a quick way to set kernel debug flags to getan output via command line whereas (ii) is useful when there is a need for detailed debugging and requires additional steps to set the buffer and get an output via command line
- B. (i) is used to debug the access control policy only, however (ii) can be used to debug a unified policy
- C. (i) is used on a Security Gateway, whereas (ii) is used on a Security Management Server
- D. (i) is used to debug only issues related to dropping of traffic, however (ii) can be used for any firewall issue including NATing, clustering etc.
正解：A
質問 # 48
Which of the following is a component of the Context Management Infrastructure used to collect signatures in user space from multiple sources, such as Application Control and IPS, and compiles them together into unified Pattern Matchers?
- A. Context Loader
- B. CMI Loader
- C. PSL - Passive Signature Loader
- D. cpas
正解：A
解説：
質問 # 49
User defined URLS and HTTPS Inspection User defined URLs on the Security Gateway are stored in which database file?
- A. https_urlf.bin
- B. urlf_https.bin
- C. urlf_db.bin
- D. https_db.bin
正解：C
質問 # 50
What does CMI stand for in relation to the Access Control Policy?
- A. Context Management Infrastructure
- B. Content Management Interface
- C. Content Matching Infrastructure
- D. Context Manipulation Interface
正解：A
質問 # 51
Captive Portal, PDP and PEP run in what space?
- A. CPM
- B. User
- C. Kernel
- D. FWD
正解：B
質問 # 52
Your users have some issues connecting with Mobile Access VPN to your gateway. How can you debug the tunnel establishment?
- A. in the file $CVPNDIR/conf/httpd.conf change the line Loglevel .. To LogLevel debug and run cvpnrestart
- B. run fw ctl zdebug -m sslvpn all
- C. in the file $VPNDIR/conf/httpd.conf change the line Loglevel .. To LogLevel debug and run vpn restart
- D. run vpn debug truncon
正解：A
質問 # 53
John has renewed his NPTX License but he gets an error (contract for Anti-Bot expired). He wants to check the subscription status on the CLI of the gateway, what command can he use for this?
- A. cpstat antimalware-f subscription status
- B. fwm lie print
- C. show license status
- D. fw monitor license status
正解：A
質問 # 54
What is the correct syntax to set all debug flags for Unified Policy related issues?
- A. fw ctl kdebug -m UP all
- B. fw ctl debug -m UP all
- C. fw ctl debug -m fw all
- D. fw ctl debug -m up all
正解：B
質問 # 55
......
試験問題解答ブレーン問題集で156-587試験問題集PDF問題：https://www.goshiken.com/CheckPoint/156-587-mondaishu.html
156-587テスト準備トレーニング練習試験問題練習テスト：https://drive.google.com/open?id=19yJa0HqDNHKCitikhc0Wx-JZYN8qK7ze