156-585問題集、CheckPoint実際の試験問題

CheckPoint Check Point Certified Troubleshooting Expert - 156-585 模擬練習

質問 1

What are some measures you can take to prevent IPS false positives?

A. Exclude problematic services from being protected by IPS (sip, H 323, etc )

B. Use IPS only in Detect mode

C. Capture packets. Update the IPS database, and Back up custom IPS files

D. Use Recommended IPS profile

正解: A

質問 2

Which command can be run in Expert mode lo verify the core dump settings?

A. grep cdm /config/db/initial

B. grep SFWDlR/config/db/initial

C. cat /etc/sysconfig/coredump/cdm conf

D. grep cdm /config/db/coredump

正解: B

質問 3

What acceleration mode utlizes multi-core processing to assist with traffic processing?

A. HyperThreading

B. SecureXL

C. Traffic Warping

D. CoreXL

正解: A

質問 4

What does CMI stand for in relation to the Access Control Policy?

A. Context Manipulation Interface

B. Context Management Infrastructure

C. Content Matching Infrastructure

D. Content Management Interface

正解: B

質問 5

What is the name of the VPN kernel process?

A. VPNK

B. FWK

C. VPND

D. CVPND

正解: A

質問 6

If the cpsemd process of SmartEvent has crashed or is having trouble coming up. then it usually indicates that___________.

A. The SmartEvent core on the Solr mdexer has been deleted

B. Postgres database ts down

C. Cpd daemon is unable to connect to the log server

D. The logged in administrator does not have permissions to run SmartEvent

正解: A