Question 1

Which command(s) will turn off all vpn debug collection?

Options :

A : vpn debug off

B : vpn debug -a off

C : vpn debug off and vpn debug ikeoff

D : fw ctl debug 0

Answer: C

Question 2

Which is the correct ''fw monitor'' syntax for creating a capture file for loading it into WireShark?

Options :

A : fw monitor -e ''accept<FILTER EXPRESSION>;'' >> Output.cap

B : This cannot be accomplished as it is not supported with R80.10

C : fw monitor -e ''accept<FILTER EXPRESSION>;'' -file Output.cap

D : fw monitor -e ''accept<FILTER EXPRESSION>;'' -o Output.cap

Answer: D

Question 3

The customer is using Check Point appliances that were configured long ago by third-party administrators. Current policy includes different enabled IPS protections and Bypass Under Load function. Bypass Under Load is configured to disable IPS inspections of CPU and Memory usage is higher than 80%. The Customer reports that IPS protections are not working at all regardless of CPU and Memory usage.

What is the possible reason of such behavior?

Options :

A : The kernel parameter ids_assume_stress is set to 0

B : The kernel parameter ids_assume_stress is set to 1

C : The kernel parameter ids_tolerance_no_stress is set to 10

D : The kernel parameter ids_tolerance_stress is set to 10

Answer: D

Question 4

What components make up the Context Management Infrastructure?

Options :

A : CMI Loader and Pattern Matcher

B : CPMI and FW Loader

C : CPX and FWM

D : CPM and SOLR

Answer: A

Question 5

What is the proper command for allowing the system to create core files?

Options :

A : service core-dump start

B : SFWDIR/scripts/core-dump-enable.sh

C :

set core-dump enable

>save config

D :

# set core-dump enable

# save config>save config

Answer: C

Free 156-587 Mock Exam – Practice Online Confidently

Buying Options: