Question 1

In Security Management High Availability, if the primary and secondary managements, running the same version of R80.x, are in a state of 'Collision', how can this be resolved?

Options :

A : Administrator should manually synchronize the servers using SmartConsole

B : The Collision state does not happen in R80.x as the synchronizing automatically on every publish action

C : Reset the SIC of the secondary management server

D : Run the command 'fw send synch force' on the primary server and 'fw get sync quiet' on the secondary server

Answer: A

Question 2

The customer is using Check Point appliances that were configured long ago by third-party administrators. Current policy includes different enabled IPS protections and Bypass Under Load function. Bypass Under Load is configured to disable IPS inspections of CPU and Memory usage is higher than 80%. The Customer reports that IPS protections are not working at all regardless of CPU and Memory usage.

What is the possible reason of such behavior?

Options :

A : The kernel parameter ids_assume_stress is set to 0

B : The kernel parameter ids_assume_stress is set to 1

C : The kernel parameter ids_tolerance_no_stress is set to 10

D : The kernel parameter ids_tolerance_stress is set to 10

Answer: D

Question 3

During firewall kernel debug with fw ctl zdebug you received less information that expected. You noticed that a lot of messages were lost since the time the debug was started. What should you do to resolve this issue?

Options :

A : Increase debug buffer Use fw ctl debug -buf 32768

B : Redirect debug output to file; Use fw ctl debug -o /debug.elg

C : Redirect debug output to file; Use fw ctl zdebug -o /debug.elg

D : Increase debug buffer; Use fw ctl zdebug -buf 32768

Answer: A

Question 4

What are the three main component of Identity Awareness?

Options :

A :

Client, SMS and Secure Gateway

B :

Identity Source Identity Server (POP) and Identity Enforcement (PEP)

C :

Identity Awareness Blade on Security Gateway, User Database on Security Management Server and Active Directory

D :

User, Active Directory and Access Role

Answer: B

Question 5

If IPS protections that prevent SecureXL from accelerating traffic, such as Network Quota, Fingerprint Scrambling. TTL Masking etc, have to be used, what is a recommended practice to enhance the performance of the gateway?

Options :

A : Use the IPS exception mechanism

B : Disable all such protections

C : Disable SecureXL and use CoreXL

D : Upgrade the hardware to include more Cores and Memory

Answer: C

Higher Test Marks with Free Online 156-587 Exam Practice

Buying Options: