最新の2025年最新の実際に出ると確認された156-587問題集で100%無料156-587試験問題集
無料提供中で2025年最新のに更新されたCheckPoint 156-587試験問題と解答
質問 # 29
If SmartLog is not active or failed to parse results from server, what commands can be run to re- enable the service?
- A. smartlogrestart and smartlogstart
- B. smartloginit and smartlogstop
- C. smartlogstart and smartlogstop
- D. smartlogstart and smartlogsetup
正解：A
質問 # 30
You run a free-command on a gateway and notice that the Swap column is not zero Choose the best answer
- A. Utilization of ram is high and swap file had to be used
- B. Swap file is used regularly because RAM memory is reserved for management traffic
- C. Its ole Swap is used to increase performance
- D. Swap memory is used for heavy connections when RAM memory is full
正解：A
質問 # 31
In Mobile Access VPN. clientless access is done using a web browser. The primary communication path for these browser based connections is a process that allows numerous processes to utilize port
443 and redirects traffic to a designated port of the respective process Which daemon handles this?
- A. Multi-portal Daemon (MPD)
- B. HTTPS Inspection Daemon (HID)
- C. Mobile Access Daemon (MAD)
- D. Connectra VPN Daemon (cvpnd)
正解：A
解説：
The Multi-portal Daemon (mpdaemon) is responsible for handling the clientless access connections in Mobile Access VPN. It listens on port 443 and redirects the traffic to the appropriate port of the process that handles the specific connection type, such as cvpnd for SSL Network Extender, MAD for Mobile Access Portal, or HID for HTTPS Inspection. The mpdaemon also performs authentication and authorization for the clientless access connections. References: Check Point Processes and Daemons1, Mobile Access Blade Administration Guide
1: https://supportcenter.checkpoint.com/supportcenter/portal?
eventSubmit_doGoviewsolutiondetails=&solutionid=sk97638 : https://sc1.checkpoint.com/documents/R81.10
/WebAdminGuides/EN/CP_R81.10_Mobile_Access_AdminGuide/html_frameset.htm
質問 # 32
What tool would you run to diagnose logging and indexing?
- A. run diagnostic view
- B. run cpm_doctor.sh
- C. cpstat mg -f log_server
- D. run doctor-log.sh
正解：D
質問 # 33
What is the buffer size set by the fw ctl zdebug command?
- A. 8 MB
- B. 1 MB
- C. 1 GB
- D. 8GB
正解：B
質問 # 34
What is the Security Gateway directory where an administrator can find vpn debug log files generated during Site-to-Site VPN troubleshooting?
- A. SFWDIR/log/
- B. opt/CPsuiteR80/vpn/log/
- C. SFWDIR/conf/
- D. SCPDIR/conf/
正解：A
解説：
The correct directory where an administrator can find vpn debug log files generated during Site-to-Site VPN troubleshooting is $FWDIR/log/. This directory contains the following files related to vpn debug:
* vpnd.elg: This file contains the high-level VPN debug information, such as the VPN tunnel establishment, deletion, and negotiation messages. It can be enabled by using the vpn debug on command on the Security Gateway CLI.
* legacy_ike.elg: This file contains the low-level IKE debug information for IKEv1, such as the IKE packets, encryption, decryption, and authentication. It can be enabled by using the vpn debug ikeon command on the Security Gateway CLI.
* legacy_ikev2.xml: This file contains the low-level IKE debug information for IKEv2, such as the IKE packets, encryption, decryption, and authentication. It can be enabled by using the vpn debug ikev2on command on the Security Gateway CLI.
These files can be viewed by using the vpn debug view command on the Security Gateway CLI, or by using the IKEView tool on the Security Management Server GUI.
References:
* vpn debug - Check Point Software
* IKE Debug on R81 and above - Check Point CheckMates
* (CCTE) - Check Point Software
質問 # 35
What is the function of the Core Dump Manager utility?
- A. To generate a new core dump for analysis
- B. To limit the number of core dump files per process as well as the total amount of disk space used by core files
- C. To determine which process is slowing down the system
- D. To send crash information to an external analyzer
正解：B
解説：
The Core Dump Manager (CDM) is a utility that helps manage core dump files on Check Point systems. Its main functions include:
Limiting file size and number: CDM can be configured to limit the size of individual core dump files and the total amount of disk space used for core dumps. This prevents core dumps from filling up valuable disk space.
Compression: CDM can compress core dump files to reduce their storage size. This is particularly helpful when dealing with large core dumps.
Process filtering: CDM allows you to specify which processes should be allowed to generate core dumps. This can help prevent unnecessary core dumps from being created.
Remote collection: CDM can be configured to send core dump files to a remote server for analysis. This is useful in environments where direct access to the system generating the core dump is limited.
By using CDM, you can effectively manage core dump files and ensure that they are not overwhelming your system's resources.
質問 # 36
The Unified Access Control policy eliminates the need to maintain policies for different access control features However, you need to start a general debug of the Unified Policy with all flags turned on Which of the following is the correct syntax?
- A. fw ctl debug -m UP all
- B. fw ctl kdebug -m UP all
- C. fwm ctl debug -m UP all
- D. fw ctl debug -m UP + all flags
正解：A
質問 # 37
If the cpsemd process of SmartEvent has crashed or is having trouble coming up, then it usually indicates that
__________.
- A. The loqqed in administrator does not have permissions to run SmartEvent
- B. Cpd daemon is unable to connect to the log server
- C. The SmartEvent core on the Solr indexer has been deleted
- D. Postgres database is down
正解：D
解説：
cpsemd is the process responsible for logging into the SmartEvent GUI. Therefore, you need to check the status of this process and debug it, if necessary. Usually, the issue with the cpsemd process is that it is crashing, or not coming up. What causes this process to crash or not come up is that the PostgreSQL database is down. Therefore, in order to run the cpsemd process successfully, you need to run the PostgreSQL database successfully.
質問 # 38
The Check Point Firewall Kernel is the core component of the Gaia operating system and an integral part of traffic inspection process. There are two procedures available for debugging the firewall kernel. Which procedure/command is used for detailed troubleshooting and needs more resources?
- A. fw debug/kdebug
- B. fw ctl zdebug
- C. fw ctl debug/kdebug
- D. fw debug/kdebug ctl
正解：C
質問 # 39
You do not see logs in the SMS. When you login on the SMS shell and run cpwd_admin list you notice that the RFL process is with status T. What command can you run to try to resolve it?
- A. RFLstop and RFLstart
- B. evstart and evstop
- C. smartlog_server stop and smartlog_server restart
- D. rflsop and rflstart
正解：C
解説：
= The RFL process is the Remote File Log process that is responsible for transferring logs from the Security Gateway to the Security Management Server1. If the RFL process is with status T, it means that it is terminated and not running2. This could explain why the logs are not seen in the SMS. To resolve this issue, one possible command to run is smartlog_server stop and smartlog_server restart3. This command will stop and restart the SmartLog server, which is the process that indexes and displays the logs in the SmartConsole.
By restarting the SmartLog server, it may also restart the RFL process and resume the log transfer.
Alternatively, one can also try to restart the RFL process directly by running cpwd_admin stop -name RFL and cpwd_admin start -name RFL. References: Check Point Processes and Daemons, sk97638 - Check Point Processes and Daemons, sk144192 - How to restart SmartLog server, [sk98348 - SmartLog / SmartView server functionality], [sk97638 - Check Point Processes and Daemons]
質問 # 40
You receive complains that Guest Users cannot login and use the Guest Network which is configured with Access Role of Guest Users. You need to verity the Captive Portal configuration. Where can you find the config file?
- A. on the management at SNACPORTAL_ HOME/conf/httpd_ nac.conf
- B. on the management at SCPNAC_ HOME/conf/httpd_ nac.conf
- C. on the gateway at $CPNAC_ HOME/conf/httpd_ nac.conf
- D. on the gateway at $NACPORTAL_ HOME/conf/httpd_ nac.conf
正解：D
質問 # 41
What command is usually used for general firewall kernel debugging and what is the size of the buffer that is automatically enabled when using the command?
- A. fw ctl debug, buffer size is 1024 KB
- B. fw ctl kdebug, buffer size is 32000 KB
- C. fw ctl zdebug, buffer size is 1 MB
- D. fw ctl zdebug, buffer size is 32768 KB
正解：D
質問 # 42
When a User process or program suddenly crashes, a core dump is often used to examine the problem Which command is used to enable the core-dumping via GAIA clish?
- A. set core-dump enable
- B. set user-dump enable
- C. set core-dump total
- D. set core-dump per_process
正解：A
解説：
In Check Point Gaia, you can enable core dumping through the command line interface (clish) using the following command:
set core-dump enable
This command activates the core dump mechanism, allowing the system to generate core dump files when user processes crash. Remember to save the configuration after enabling core dumps with the command:
save config
Why other options are incorrect:
* B. set core-dump total: This command is used to set the total disk space limit for core dump files, not to enable core dumping itself.
* C. set user-dump enable: There is no such command in Gaia clish for enabling core dumps.
* D. set core-dump per_process: This command sets the maximum number of core dump files allowed per process, but it doesn't enable core dumping.
Check Point Troubleshooting References:
* Check Point R81.20 Security Administration Guide: This guide provides comprehensive information about Gaia clish commands, including those related to system configuration and troubleshooting.
* Check Point sk92764: This knowledge base article specifically addresses core dump management in Gaia, explaining how to enable and configure core dumps.
Enabling core dumps is a crucial step in troubleshooting process crashes as it provides valuable information for analysis and debugging.
質問 # 43
What is the proper command for allowing the system to create core files?
- A. service core-dump start
- B. set core-dump enable
>save config - C. # set core-dump enable
# save config - D. SFWDIR/scripts/core-dump-enable.sh
正解：B
質問 # 44
......
156-587問題集PDFとテストエンジン試験問題：https://www.passtest.jp/CheckPoint/156-587-shiken.html
無料提供中で最新の156-587認定有効な試験問題集はこれ：https://drive.google.com/open?id=1_0G8v3rciICp7OtXbCDxD_RHjOO-pTwu