Check Point Certified Troubleshooting Expert - R81 (156-586) Free Practice Test

Question 1

What cli command is run on the GW to verify communication to the Identity Collector?

A. show idc connections

B. pep connections idc

C. pdp connections idc

D. fwd connected

Correct Answer: C

Question 2

What are the four main database domains?

A. Local, Global, User, VPN

B. System, User, Host, Network

C. System. Global. Log. Event

D. System, User, Global. Log

Correct Answer: D

Question 3

The management configuration stored in the Postgres database is partitioned into several relational database domains. What is the purpose of the Global Domain?

A. This domain is used as the global database for MDSM and contains global objects and policies.

B. This domain is used as the global database to back up the objects referencing the corresponding object attributes from the System Domain.

C. This domain is used as the global database to track the changes made by multiple administrators on the same objects prior to publishing.

D. Global Domains is used by the IPS software blade to map the IDs to the corresponding countries according to the IpToCountry.csv file.

Correct Answer: B

Question 4

Troubleshooting issues with Mobile Access requires the following:

A. 'ma_vpnd' process on Security Gateway

B. Debug logs of FWD captured with the command - 'fw debug fwd on
TDERROR_MOBILE_ACCESS=5'

C. Standard VPN debugs and packet captures on Security Gateway, debugs of 'cvpnd' process on Security Management

D. Standard VPN debugs, packet captures, and debugs of 'cvpnd' process on Security Gateway

Correct Answer: A

Question 5

What is the port for the Log Collection on Security Management Server?

A. 18191

B. 443

C. 257

D. 253

Correct Answer: C

Question 6

In some scenarios it is very helpful to use advanced Linux commands for troubleshooting purposes. Which command displays information about resource utilization for running processes and shows additional information for core utilization and memory?

A. cptop

B. mpstat

C. vmstat

D. top

Correct Answer: D

Question 7

What is the Security Gateway directory where an administrator can find vpn debug log files generated during Site-to-Site VPN troubleshooting?

A. $CPDIR/conf/

B. /opt/CPsuiteR80/vpn/log/

C. $FWDIR/log/

D. $FWDIR/conf/

Correct Answer: C

Question 8

You need to run a kernel debug over a longer period of time as the problem occurs only once or twice a week.
Therefore, you need to add a timestamp to the kernel debug and write the output to a file but you can't afford to fill up all the remaining disk space and you only have 10 GB free for saving the debugs. What is the correct syntax for this?

A. fw ctl kdebug -T -f -m 10 -s 1000000 > debugfilename

B. fw ctl kdebug-T -m 10 -s 1000000 -o debugfilename

C. fw ctl debug -T -f -m 10 -s 1000000 -o debugfilename

D. fw ctl kdebug -T -f -m 10 -s 1000000 -o debugfilename

Correct Answer: D

Welcome to TestSimulate

CheckPoint Check Point Certified Troubleshooting Expert - R81 (156-586) Free Practice Test