EMT Practice Test

1. Question Content...

---

Question1: Which layer in the IPS blade is responsible for reassembly of TCP packets as they arrive at the gateway?

Question2: If you are experiencing performance issues on a gateway and you suspect it may be related to the interfaces, what command will assist in determining if packets are not being received into the gateway?

Question3: After determining that the IPS Blade is causing high resource utilization in the gateway, which would be an appropriate strategy to improve IPS performance?

Question4: Which IPS command debug tool can you use for troubleshooting IPS traffic?

Question5: Which of the following is NOT a feature of ClusterXL?

Question6: Which command shows the proxy arp configuration on the firewall?

Question7: What ClusterXL mechanism is used to verify that the interfaces of other cluster members are UP and communicates the status of cluster members?

Question8: In order to test ClusterXL failovers which command would you use on one of the ClusterXL nodes to initiate a failover?

Question9: A Firewall administrator is attempting to push a policy to a new Security Gateway for a remote office but the installation fails. The Management Server IP is 10.1.1.101. Initial troubleshooting shows that policy is successfully transferred to the Gateway. What command would you use to attempt to identify the cause of the issue?

Question10: Fill in the blank. The toolgenerates a R80 Security Gateway configuration report.

Question11: You verified that Performance Pack is disabled and need to distribute the affinity interfaces. What command would you run to use static affinity to balance the interfaces between the SND cores?

Question12: When dealing with monolithic operating systems such as Gaia, where are system calls initiated from to achieve a required system level function?

Question13: What file extension should be used with fw monitor to allow the output file to be imported and read in Wireshark?

Question14: Where will the usermode core files located?

Question15: How would an administrator view the routing table on the Security Gateway of production network where IPv6 is being used?

Question16: You run "cat/proc/smt_status" on your security gateway and the output shows 'Soft Disable'. How is your system configured in reference to hyper-threading?

Question17: John works for ABC Corporation. They have enabled CoreXL on their firewall. John would like to identify the cores on which the SND runs and the cores on which the firewall instance is running. Which command should John run to view the CPU role allocation?

Question18: Which command should be used to insert fw monitor before secxl_sync module?

Question19: When troubleshooting Hide NAT failure, what step should be taken after the NAT configuration has been verified?

Question20: You are about to add an IPv6 address to an interface with CLISH, but the system generates a message stating that the command is unknown. What could be the reason of this behavior?

Question21: Regarding the Database Domains, which of the following best describes the System Domain?

Question22: How often will a gateway with Performance Pack running by default automatically review and distribute interface affinity between cores?

Question23: Which command is used to enable IPv6 on Security Gateway?

Question24: Which of the following file is commonly associated with troubleshooting crashes on a system such as the Security Gateway?

Question25: Which of the following is NOT a valid "fwaccel" parameter?

Question26: You issued the command "set ipv6-state on" in order to enable IPv6 protocol on a Security Gateway. The command was executed successfully. After reboot you notice that IPv6 protocol is not enabled. What do you do to permanently enable IPv6 protocol?

Question27: When debugging object configurations in SmartConsole, which new Windows Environment Variable must be added?

Question28: For organizations with existing IPv4 networks who wish to move to IPv6, which of the following is a Transition Mechanism that can be used?

Question29: Which Check Point daemon, if it stops responding or goes down, results in connections from the SmartConsole to the Management Server failing?

Question30: Which command is used to write a kernel debug to a file?

Question31: What is the difference between disabling SecureXL by running "fwaccel off" and disabling it via cpconfig?

Question32: How can you print the session UUID and the UUID of a connection together in fw monitor?

Question33: Which of the connections cannot be accelerated with SecureXL?

Question34: Which Threat Prevention daemon is the core Threat Emulation engine and responsible for emulation files and communications with Threat Cloud?

Question35: Your company's site to site VPN tunnel has been established, however, some or all of the traffic is being dropped. Which one of the commands below could be used in troubleshooting the issue?

Question36: Which daemon is used for Geo protection?

Question37: Which of the following commands can be used to see the list of processes monitored by the Watch Dog process?

Question38: Which of the following statements is TRUE about R80 management plug-ins?

Question39: Consider a Check Point Security Gateway under high load. What mechanism can be used to confirm that important traffic such as control connections are not dropped?

Question40: What is the Debug Output path for the CPM process?

Question41: What is the correct syntax for firewall monitor to output to standard out?

Question42: Which of the following would NOT be a flag when debugging a unified policy?

Question43: Your company plans to start migration on IPv6 protocol. What steps do you need to perform to fully enable IPv6 protocol on the Security Gateway?

Question44: Having a look at the output of the "fwaccel conns" command, the F flag is the indicator for a packet
.

Question45: Which of the following is true about Protocol Signatures?

Question46: When troubleshooting static NAT, you would follow all the steps below, EXCEPT:

Question47: The maximum number of critical devices or pnotes on a cluster member is what?

Question48: Where do Protocol parsers register themselves for IPS?

Question49: Where will the command, "fw monitor -pi -vpn", be inserted into the fw ctl chain?

Question50: The CPSizeMe script will run how long by default?

Question51: When enabling hyper-threading on a Security Gateway, the administrator needs to make sure there is enough to support additional CoreXL Firewall instances.

Question52: Which command query will search the database for instances of the following FW-Corporate object:

Question53: Of how many packets consists Main Mode in Phase 1?

Question54: Which of the following features is supported in Check Point's implementation of IPv6?

Question55: The clusterXL_monitor_ips script.

Question56: What is the default and maximum number of entries in the ARP Cache Table in a Check Point appliance?