EMT Practice Test

1. Question Content...

A. Choice A

B. Choice B

C. Choice C

D. Choice D

E. Choice E

Was this helpful? Upvote!

Question List

Question1: Which of the following daemons is used for Threat Extraction?

Question2: What are some measures you can take to prevent IPS false positives?

Question3: Which file is commonly associated with troubleshooting crashes on a system such as the Security Gateway?

Question4: What file extension should be used with fw monitor to allow the output file to be imported and read in Wireshark?

Question5: What is the correct syntax to set all debug flags for Unified Policy related issues?

Question6: What process monitors, terminates, and restarts critical Check Point processes as necessary?

Question7: What file contains the RAD proxy settings?

Question8: Which command can be run in Expert mode lo verify the core dump settings?

Question9: Which command is most useful for debugging the fwaccel module?

Question10: You are running R80.XX on an open server and you see a high CPU utilization on your 12 CPU cores You now want to enable Hyperthreading to get more cores to gain some performance. What is the correct way to achieve this?

Question11: If IPS protections that prevent SecureXL from accelerating traffic, such as Network Quota, Fingerprint Scrambling. TTL Masking etc, have to be used, what is a recommended practice to enhance the performance of the gateway?

Question12: Some users from your organization have been reporting some connection problems with CIFS since this morning You suspect an IPS issue after an automatic IPS update last night. So you want to perform a packet capture on uppercase I only directly after the IPS chain module (position 4 in the chain) to check If the packets pass the IPS. What command do you need to run?

Question13: The two procedures available for debugging in the firewall kernel are
i fw ctl zdebug
ii fw ctl debug/kdebug
Choose the correct statement explaining the differences in the two

Question15: Which is the correct "fw monitor" syntax for creating a capture file for loading it into WireShark?

Question16: John works for ABC Corporation.They have enabled CoreXL on their firewall John would like to identify the cores on which the SND runs and the cores on which the firewall instance is running. Which command should John run to view the CPU role allocation?

Question17: Which of the following inputs is suitable for debugging HTTPS inspection issues?

Question18: Which process is responsible for the generation of certificates?

Question19: Which of the following is a component of the Context Management Infrastructure used to collect signatures in user space from multiple sources, such as Application Control and IPS. and compiles them together into unified Pattern Matchers?

Question20: What command sets a specific interface as not accelerated?

Question21: Which kernel process is used by Content Awareness to collect the data from contexts?

Question22: When a User process or program suddenly crashes, a core dump is often used to examine the problem. Which command is used to enable the core-dumping via GAIA dish?

Question23: What is the most efficient way to view large fw monitor captures and run filters on the file?

Question24: Where do Protocol parsers register themselves for IPS?

Question25: What command is usually used for general firewall kernel debugging and what is the size of the buffer that is automatically enabled when using the command?

Question26: the difference in debugging a S2S or C2S (using Check Point VPN Client) VPN?

Question27: If you run the command "fw monitor -e accept src=10.1.1.201 or src=172.21.101.10 or src=192.0.2.10;" from the cli sh What will be captured?

Question28: The management configuration stored in the Postgres database is partitioned into several relational database Domains, like - System, User, Global and Log Domains. The User Domain stores the network objects and security policies. Which of the following is stored in the Log Domain?

Question29: You are upgrading your NOC Firewall (on a Check Point Appliance) from R77 to R80 30 but you did not touch the security policy After the upgrade you can't connect to the new R80 30 SmartConsole of the upgraded Firewall anymore What is a possible reason for this?

Question30: Jenna has to create a VPN tunnel to a CISCO ASA but has to set special property to renegotiate the Phase 2 tunnel after 10 MB of transferee1 dat a. This can not be configured in the smartconsole, so how can she modify this property?

Question31: Which command is used to write a kernel debug to a file?

Question32: You have configured IPS Bypass Under Load function with additional kernel parameters ids_tolerance_no_stress=15 and ids_tolerance_stress-15 For configuration you used the *fw ctl set' command After reboot you noticed that these parameters returned to their default values What do you need to do to make this configuration work immediately and stay permanent?

Question33: What are four main database domains?

Question34: What is the main SecureXL database for tracking acceleration status of traffic?

Question35: What does CMI stand for in relation to the Access Control Policy?

Question36: You need to run a kernel debug over a longer period of time as the problem occurs only once or twice a week. Therefore, you need to add a timestamp to the kernel debug and write the output to a file but you can't afford to fill up all the remaining disk space and you only have 10 GB free for saving the debugs. What is the correct syntax for this?

Question37: What is the main SecureXL database for tracking the acceleration status of traffic?

Question38: Check Point Access Control Daemons contains several daemons for Software Blades and features Which Daemon is usedfor Application & Control URL Filtering?

Question39: URL Filtering is an essential part of Web Security in the Gateway. For the Security Gateway to perform a URL lookup when a client makes a URL request, where is the sync-request forwarded from if a sync-request is required''

Question40: Check Point Threat Prevention policies can contain multiple policy layers and each layer consists of its own Rule Base Which Threat Prevention daemon is used for Anti-virus?