Free CheckPoint 156-586 Exam Dumps Questions & Answers

You receive reports that Users cannot browse internet sites. You are using identity awareness with AD Query and Identity Collector in addition you have the Browser Based Authentication Enabled. What command can be used to debug the problem?

• A.  on the gateway: pdp debug nac extended
• B.  on the gateway: ad query debug on
• C.  on the gateway: ad debug on
• D.  on the management: ad query debug extended

What is the simplest and most efficient way to check all dropped packets in real time?

• A.  Smartlog
• B.  fw ctl zdebug + drop in expert mode
• C.  cat /dev/fw1/log in expert mode
• D.  tail -f $FWDIR/log/fw.log |grep drop in expert mode

The Check Point Firewall Kernel is the core component of the Gaia operating system and an integral part of the traffic inspection process. There are two procedures available for debugging the firewall kernel. Which procedure/command is used for troubleshooting packet drops and other kernel activities while using minimal resources (1 MB buffer)?

• A.  fw ctl debug/kdebug
• B.  fw ctl zdebug
• C.  fw debug ctl
• D.  fwk ctl debug

What is the Security Gateway directory where an administrator can find vpn debug log files generated during Site-to-Site VPN troubleshooting?

• A.  $FWDIR/log/
• B.  $FWDIR/conf/
• C.  $CPDIR/conf/
• D.  /opt/CPsuiteR80/vpn/log/

You do not see logs in the SMS. When you login on the SMS shell and run cpwd_admin list you notice that the RFL process is with status T. What command can you run to try to resolve it?

• A.  rflsop and rflstart
• B.  evstart and evstop
• C.  smartlog_server stop and smartlog_server restart
• D.  RFLstop and RFLstart