Question 1

Captive Portal, PDP and PEP run in what space?

Options :

A : Kernel

B : User

C : CPM

D : FWD

Answer: B

Question 2

You have configured IPS Bypass Under Load function with additional kernel parameters ids_tolerance_no_stress=15 and ids_tolerance_stress-15 For configuration you used the *fw ctl set' command After reboot you noticed that these parameters returned to their default values What do you need to do to make this configuration work immediately and stay permanent?

Options :

A : Set these parameters again with ''fw ctl set'' and edit appropriate parameters in $FWDIR/boot/modules/ fwkern.conf

B : Use script $FWDIR/bin IpsSetBypass.sh to set these parameters

C :

Set these parameters again with ''fw ctl set'' and save configuration with ''save config''

D : Edit appropriate parameters in $FWDIR/boot/modules/fwkern.conf

Answer: A

Question 3

What command sets a specific interface as not accelerated?

Options :

A : noaccel-s<interface1>

B : fwaccel exempt state <interface1>

C : nonaccel -s <interface1>

D : fwaccel -n <intetface1 >

Answer: C

Question 4

Which command can be run in Expert mode to verify the core dump settings?

Options :

A : grep cdm /config/db/coredump

B : grep cdm /config/db/initial

C : grep $FWDIR/config/db/initial

D : cat /etc/sysconfig/coredump/cdm.conf

Answer: C

Question 5

What are the main components of Check Point’s Security Management architecture?

Options :

A : Management server, Log server, Gateway server. Security server

B : Management server, management database, log server, automation server

C : Management server. Security Gateway. Multi-Domain Server. SmartEvent Server

D : Management server. Log Server, LDAP Server, Web Server

Answer: B

Free 156-587 Mock Exam – Practice Online Confidently

Buying Options: