Free CheckPoint 156-585 Exam Dumps Questions & Answers

If the cpsemd process of SmartEvent has crashed or is having trouble coming up. then it usually indicates that___________.

• A.  The logged in administrator does not have permissions to run SmartEvent
• B.  Cpd daemon is unable to connect to the log server
• C.  The SmartEvent core on the Solr mdexer has been deleted
• D.  Postgres database ts down

What is the proper command for allowing the system to create core files?

• A.  # set core-dump enable
  # save config
• B.  $FWDIR/scripts/core-dump-enable.sh
• C.  >set core-dump enable
  >save config
• D.  service core-dump start

Select the technology that does the following actions
- provides reassembly via streaming for TCP
- handles packet reordering and congestion
- handles payload overlap
- provides consistent stream of data to protocol parsers

• A.  Passive Streaming Library
• B.  Pre-Protocol Parser
• C.  fwtcpstream
• D.  Context Management

Which kernel process is used by Content Awareness to collect the data from contexts?

• A.  PDP
• B.  cpemd
• C.  CMI
• D.  dlpda

What are some measures you can take to prevent IPS false positives?

• A.  Use IPS only in Detect mode
• B.  Capture packets. Update the IPS database, and Back up custom IPS files
• C.  Exclude problematic services from being protected by IPS (sip, H 323, etc )
• D.  Use Recommended IPS profile