ベストな準備プラン156-587試験2025年最新のCCTE無制限101問題
注目すべき時短になる156-587オールインワン試験ガイド
質問 # 13
What information does the doctor-log script supply?
- A. Logging rates. Logging Directories, List of troubleshooting tips
- B. Current and daily average logging rates. Indexing status, Size
- C. Logging errors. Exceptions, Repair options
- D. Repair options. Logging Rates, Logging Directories
正解：B
質問 # 14
You are using the identity Collector with identity Awareness in large environment. Users report that they cannot access resources on Internet You identify that the traffic is matching the cleanup rule Instead of the proper rule with Access Roles using the IDC How can you check if IDC is working?
- A. ad query I debug on
- B. pdp connections idc
- C. pep debug idc on
- D. pdp debug set IDP all
正解：B
質問 # 15
An administrator receives reports about issues with log indexing and text searching regarding an existing Management Server. In trying to find a solution she wants to check if the process responsible for this feature is running correctly. What is true about the related process?
- A. solr is a child process of cpm
- B. cpd needs to be restarted manual to show in the list
- C. fwssd crashes can affect therefore not show in the list
- D. fwm manaqes this database after initialization of the 1CA
正解：A
質問 # 16
John has renewed his NPTX License but he gets an error (contract for Anti-Bot expired). He wants to check the subscription status on the CLI of the gateway, what command can he use for this?
- A. fwm lie print
- B. cpstat antimalware-f subscription status
- C. show license status
- D. fw monitor license status
正解：B
質問 # 17
You receive reports that Users cannot browse internet sites. You are using identity awareness with AD Query and Identity Collector in addition you have the Browser Based Authentication Enabled.
What command can be used to debug the problem?
- A. on the gateway: ad debug on
- B. on the management: ad query debug extended
- C. on the gateway: ad query debug on
- D. on the gateway: pdp debug nac extended
正解：D
質問 # 18
You do not see logs in the SMS. When you login on the SMS shell and run cpwd_admin list you notice that the RFL process is with status T. What command can you run to try to resolve it?
- A. evstart and evstop
- B. RFLstop and RFLstart
- C. rflsop and rflstart
- D. smartlog_server stop and smartlog_server restart
正解：D
解説：
= The RFL process is the Remote File Log process that is responsible for transferring logs from the Security Gateway to the Security Management Server1. If the RFL process is with status T, it means that it is terminated and not running2. This could explain why the logs are not seen in the SMS. To resolve this issue, one possible command to run is smartlog_server stop and smartlog_server restart3. This command will stop and restart the SmartLog server, which is the process that indexes and displays the logs in the SmartConsole.
By restarting the SmartLog server, it may also restart the RFL process and resume the log transfer.
Alternatively, one can also try to restart the RFL process directly by running cpwd_admin stop -name RFL and cpwd_admin start -name RFL. References: Check Point Processes and Daemons, sk97638 - Check Point Processes and Daemons, sk144192 - How to restart SmartLog server, [sk98348 - SmartLog / SmartView server functionality], [sk97638 - Check Point Processes and Daemons]
質問 # 19
What file contains the RAD proxy settings?
- A. rad_control.C
- B. rad_scheme.C
- C. rad_services.C
- D. rad_settings.C
正解：D
質問 # 20
Which of the following daemons is used for Threat Extraction?
- A. tex
- B. tedex
- C. extractd
- D. scrubd
正解：D
質問 # 21
In some scenarios it is very helpful to use advanced Linux commands for troubleshooting purposes. Which command displays information about resource utilization for running processes and shows additional information for core utilization and memory?
- A. top
- B. cptop
- C. vmstat
- D. mpstat
正解：A
質問 # 22
The management configuration stored in the Postgres database is partitioned into several relational database domains. What is the purpose of the Global Domain?
- A. This domain is used as the global database for MDSM and contains global objects and policies.
- B. This domain is used as the global database to track the changes made by multiple administrators on the same objects prior to publishing.
- C. Global Domains is used by the IPS software blade to map the IDs to the corresponding countries according to the IpToCountry.csv file.
- D. This domain is used as the global database to back up the objects referencing the corresponding object attributes from the System Domain.
正解：A
解説：
The Global Domain is one of the relational database domains in the Postgres database that stores the management configuration. The purpose of the Global Domain is to serve as the global database for Multi- Domain Security Management (MDSM) and contain the global objects and policies that are shared across all domains. The Global Domain also stores the global settings, such as the administrator roles, the LDAP servers, the IPS profiles, and the SmartEvent views. The Global Domain can be managed by the Global Domain Administrator or the Super User Administrator using the SmartConsole. The Global Domain can be backed up and restored using the mds_backup and mds_restore commands.
References:
* 1: Architecture and Processes - Check Point Software
* 2: Multi-Domain Security Management R81.10 Administration Guide
* 3: How to backup and restore Multi-Domain Security Management Server
質問 # 23
Which command shows the installed licenses and contracts on a Check Point device?
- A. fwlic print -x
- B. cplic print -s
- C. cplicenses print -x
- D. cplic print -x
正解：D
質問 # 24
What does CMI stand for in relation to the Access Control Policy?
- A. Context Management Infrastructure
- B. Context Manipulation Interface
- C. Content Management Interface
- D. Content Matching Infrastructure
正解：A
解説：
CMI stands for Context Management Infrastructure, which is a component of the Access Control Policy that enables the Security Gateway to inspect traffic based on the context of the connection. Context includes information such as user identity, application, location, time, and device. CMI allows the Security Gateway to apply different security rules and actions based on the context of the traffic, and to dynamically update the context as it changes. CMI consists of three main elements: Unified Policy, Identity Awareness, and Content Awareness.
質問 # 25
Check Point provides tools & commands to help you to identify issues about products and applications. Which Check Point command can help you to display status and statistics information for various Check Point products and applications?
- A. CPview
- B. cpstat
- C. fwstat
- D. CPstat
正解：B
質問 # 26
What is the simplest and most efficient way to check all dropped packets in real time?
- A. Smartlog
- B. tail -f $FWDIR/log/fw.log |grep drop in expert mode
- C. cat /dev/fw1/log in expert mode
- D. fw ctl zdebug + drop in expert mode
正解：D
解説：
The simplest and most efficient way to check all dropped packets in real time is C. fw ctl zdebug + drop in expert mode. This command is a shortcut command that sets the kernel debug flags to a predefined value and prints the debug output to the standard output. It is useful for general debugging of common issues, such as traffic drops, NAT, VPN, or clustering. It has a small buffer size and does not require additional steps to start or stop the debugging. However, it has some limitations, such as it cannot be used with SecureXL, it cannot filter the output by chain modules, and it cannot save the output to a file12.
The other commands are not as simple or efficient as the fw ctl zdebug + drop command. The command tail -f
$FWDIR/log/fw.log |grep drop in expert mode will only show the drops that are logged in the fw.log file, which may not include all the drops that occur in the kernel. The command cat /dev/fw1/log in expert mode will show the raw binary data of the kernel debug buffer, which is not human-readable and may contain irrelevant information. The command Smartlog will show the drops that are indexed and stored in the SmartEvent database, which may not be in real time and may depend on the log server performance12.
1: https://sc1.checkpoint.com/documents/R81.10/WebAdminGuides/EN/CP_R81.
10_AdvancedTechnicalReferenceGuide/html_frameset.htm 2: https://www.checkpoint.com/downloads
/training/DOC-Training-Data-Sheet-CCTE-R81.10-V1.0.pdf
質問 # 27
What is NOT a benefit of the `fw ctl zdebug' command?
- A. Automatically allocate a 1MB buffer
- B. Cannot be used to debug additional modules
- C. Clean the buffer
- D. Collect debug messages from the kernel
正解：B
質問 # 28
......
合格保証付き156-587問題集：https://www.passtest.jp/CheckPoint/156-587-shiken.html
あなたを合格さすCheckPoint 156-587試験専門はここにある：https://drive.google.com/open?id=1_0G8v3rciICp7OtXbCDxD_RHjOO-pTwu