Check Point Access Control Daemons includes several daemons for Software Blades and features. Which daemon is used for Application & Control URL Filtering?
Acprad
Brad
Cpepd
Dpdpd
0
Community Discussion
No comments yet. Be the first to start the discussion!
Which statement is correct about the Resource Advisor (RAD) service on Security Gateways?
ARAD functions completely in user space. The Pattern Matter (PM) module of the CMI looks up for URLs in the cache and if not found, contact the RAD process in user space to do online categorization
BRAD is completely loaded as a kernel module that looks up URL in cache and if not found connects online for categorization. There is no user space involvement in this process
CRAD is not a separate module, it is an integrated function of the 'fw' kernel module and does all operations in the kernel space
DRAD has a kernel module that looks up the kernel cache, notifies client about hits and misses and forwards a-sync requests to RAD user space module which is responsible for online categorization
0
Community Discussion
No comments yet. Be the first to start the discussion!
No comments yet. Be the first to start the discussion!
Save question
0
Community Discussion
No comments yet. Be the first to start the discussion!
Save question
0
Community Discussion
No comments yet. Be the first to start the discussion!
Save question
0
Community Discussion
No comments yet. Be the first to start the discussion!
Save question
0
Community Discussion
No comments yet. Be the first to start the discussion!
Save question
0
Community Discussion
No comments yet. Be the first to start the discussion!
Save question
0
Community Discussion
No comments yet. Be the first to start the discussion!
Save question
0
Community Discussion
No comments yet. Be the first to start the discussion!
Save question
0
Community Discussion
No comments yet. Be the first to start the discussion!
Save question
0
Community Discussion
No comments yet. Be the first to start the discussion!
Save question
0
Community Discussion
No comments yet. Be the first to start the discussion!
Save question
0
Community Discussion
No comments yet. Be the first to start the discussion!
Save question
0
Community Discussion
No comments yet. Be the first to start the discussion!
Save question
0
Community Discussion
No comments yet. Be the first to start the discussion!
Save question
0
Community Discussion
No comments yet. Be the first to start the discussion!
Save question
0
Community Discussion
No comments yet. Be the first to start the discussion!
Save question
0
Community Discussion
No comments yet. Be the first to start the discussion!
Save question
0
Community Discussion
No comments yet. Be the first to start the discussion!
Save question
0
Community Discussion
No comments yet. Be the first to start the discussion!
When viewing CPMI object data in the Postgres database, which table column should be selected to query the object instance?
ACpmiHostCkp
Bfwset
CCPM_Global_M
DGuiDBedit
In Mobile Access VPN, clientless access is performed through a web browser. The main communication route for these browser-based connections is a process that enables multiple processes to use port 443 and redirects traffic to the appropriate port for each process. Which daemon performs this function?
AMobile Access Daemon (MAD)
BConnectra VPN Daemon (cvpnd)
CHTTPS Inspection Daemon (HID)
DMulti-portal Daemon (MPD)
Troubleshooting Mobile Access issues requires the following:
AStandard VPN debugs and packet captures on Security Gateway, debugs of ‘cvpnd’ process on Security Management
BDebug logs of FWD captured with the command - ‘fw debug fwd on TDERROR_MOBILE_ACCESS=5’
C‘ma_vpnd’ process on Security Gateway
DStandard VPN debugs, packet captures, and debugs of ‘cvpnd’ process on Security Gateway
Users are having difficulty opening a web page, and you need to troubleshoot the issue. When you open SmartConsole and navigate to Logs and Monitor, the following message appears: "SmartLog is not active or Failed to parse results from server".
What is the first action you can try to resolve this?
ARun the commands on the SMS: smartlogstart and smartlogstop
Bsmartlog debug on and smartlog debug off
Csmartlog_server restart
Dcpmstop and cpmstart
Logs are not visible in the SMS. After logging in to the SMS shell and running cpwd_admin list, you see that the RFL process has status T. Which command can you run to try to resolve this?
ARFLstop and RFLstart
Bevstart and evstop
Csmartlog_server stop and smartlog_server restart
Drflsop and rflstart
You are using the Identity Collector (IDC) with Identity Awareness in a large environment. Users report that they cannot access Internet resources. You determine that traffic matches the cleanup rule rather than the appropriate rule that uses Access Roles with the IDC. How can you verify that the IDC is working?
Apep debug idc on
Bpdp debug set IDP all all
Cad query | debug on
Dpdp connections idc
Within Check Point's Packet Processing Infrastructure, what function do Observers perform?
AThey store Rule Base matching state related information
BObservers monitor the state of Check Point gateways and report it to the security manager
CObservers attach object IDs to traffic
DObservers decide whether or not to publish a CLOB to the Security Policy
Which Content Awareness kernel process gathers data from contexts received from the CMI and determines whether a file matches a data type?
Acntawmod
Bdlpda
Cdlpu
Dcntmgr
You are receiving output from a previous kernel debug. Which command should you run to avoid this?
Afw ctl debug = 0
Bfw ctl clean buffer = 0
Cfw ctl zdebug disable
Dfw ctl debug 0
Which of the following is not a flag for debugging a unified policy?
Atls
Brulebase
Cclob
Dconnection
The Check Point Firewall Kernel is the central component of the Gaia operating system and an essential part of the traffic-inspection process. Two procedures are available to debug the firewall kernel. Which procedure/command is used to troubleshoot packet drops and other kernel activity while using minimal resources (a 1 MB buffer)?
Afw debug ctl
Bfw ctl debug/kdebug
Cfw ctl zdebug
Dfwk ctl debug
Your users are experiencing issues connecting to your gateway with Mobile Access VPN. How can you debug tunnel establishment?
Ain the file $CVPNDIR/conf/httpd.conf change the line Loglevel .. To LogLevel debug and run cvpnrestart
Bin the file $VPNDIR/conf/httpd.conf change the line Loglevel .. To LogLevel debug and run vpn restart
Crun vpn debug truncon
Drun fw ctl zdebug -m sslvpn all
What is the VPN kernel process called?
AFWK
BVPND
CCVPND
DVPNK
In which Security Gateway directory can an administrator locate VPN debug log files produced while troubleshooting a Site-to-Site VPN?
A/opt/CPsuiteR80/vpn/log/
B$FWDIR/conf/
C$FWDIR/log/
D$CPDIR/conf/
What details does the doctor-log script provide?
ALogging errors, Exceptions, Repair options
BCurrent and daily average logging rates, Indexing status, Size
CLogging rates, Logging Directories, List of troubleshooting tips
If SmartLog is inactive or cannot parse results from the server, which commands can be run to re-enable the service?
Asmartlogrestart and smartlogstart
Bsmartlogstart and smartlogstop
Csmartloginit and smartlogstop
Dsmartlogstart and smartlogsetup
Which of the following is not a benefit of the fw ctl zdebug command?
ACannot be used to debug additional modules
BClean the buffer
CCollect debug messages from the kernel
DAutomatically allocate a 1MB buffer
When a User Mode process unexpectedly crashes, it can generate a core dump file. Which of the following information is available in that core dump and can be used to determine the root cause of the crash?
i. Program Counter
ii. Stack Pointer
iii. Memory management information
iv. Other Processor and OS flags / information
Aiii and iv only
Bi, ii, iii and iv
Ci and ii only
DOnly iii
John renewed his NPTX License but receives a contract for Anti-Bot expired error. Which command can he use on the gateway CLI to check the subscription status?
Afwm lic print
Bfw monitor license status
Ccpstat antimalware -f subscription_status
Dshow license status
PostgreSQL is a powerful, open-source relational database management system. Check Point provides a command to view the database through the PostgreSQL interactive shell. Which command must you enter to access the PostgreSQL interactive shell?
Community Discussion