EMT Practice Test

1. Question Content...

---

Question1: Which command can be run in Expert mode lo verify the core dump settings?

Question2: What acceleration mode utilizes multi-core processing to assist with traffic processing?

Question3: What process monitors, terminates, and restarts critical Check Point processes as necessary?

Question4: Vanessa is reviewing ike.elg file to troubleshoot failed site-to-site VPN connection After sending Mam Mode Packet 5 the response from the peer is PAYLOAD-MALFORMED" What is the reason for failed VPN connection?

Question5: URL Filtering is an essential part of Web Security in the Gateway. For the Security Gateway to perform a URL lookup when a client makes a URL request, where is the sync-request forwarded from if a sync-request is required''

Question6: Which of the following daemons is used for Threat Extraction?

Question7: What is the correct syntax to turn a VPN debug on and create new empty debug files?

Question8: What is the simplest and most efficient way to check all dropped packets in real time?

Question9: Which of the following is contained in the System Domain of the Postgres database?

Question10: How many tiers of pattern matching can a packet pass through during IPS inspection?

Question11: What are four main database domains?

Question12: What are some measures you can take to prevent IPS false positives?

Question13: What file extension should be used with fw monitor to allow the output file to be imported and read in Wireshark?

Question14: John works for ABC Corporation.They have enabled CoreXL on their firewall John would like to identify the cores on which the SND runs and the cores on which the firewall instance is running. Which command should John run to view the CPU role allocation?

Question15: What table does command "fwaccel conns" pull information from?

Question16: Which one of the following is NOT considered a Solr core partition:

Question17: After kernel debug with "fw ctl debug" you received a huge amount of information It was saved in a very large file that is difficult to open and analyze with standard text editors Suggest a solution to solve this issue.

Question18: How many captures does the command "fw monitor -p all" take?

Question19: Check Point Access Control Daemons contains several daemons for Software Blades and features. Which Daemon is used for Application & Control Filtering?

Question20: Your users have some issues connecting Mobile Access VPN to the gateway. How can you debug the tunnel establishment?

Question21: When a User process or program suddenly crashes, a core dump is often used to examine the problem. Which command is used to enable the core-dumping via GAIA dish?

Question22: Which daemon governs the Mobile Access VPN blade and works with VPND to create Mobile Access VPN connections? It also handles interactions between HTTPS and the Multi-Portal Daemon.

Question23: What is the correct syntax to set all debug flags for Unified Policy related issues?

Question24: Which command(s) will turn off all vpn debug collection?

Question25: What is the best way to resolve an issue caused by a frozen process?

Question26: To check the current status of hyper-threading, which command would you execute in expert mode?

Question27: Which Daemon should be debugged for HTTPS Inspection related issues?

Question28: Which of the following is NOT a vpn debug command used for troubleshooting?

Question29: Which is the correct "fw monitor" syntax for creating a capture file for loading it into WireShark?

Question30: For TCP connections, when a packet arrives at the Firewall Kernel out of sequence or fragmented, which layer of IPS corrects this to allow for proper inspection?

Question31: What is the benefit of running "vpn debug trunc over "vpn debug on"?

Question32: The management configuration stored in the Postgres database is partitioned into several relational database Domains, like - System, User, Global and Log Domains. The User Domain stores the network objects and security policies. Which of the following is stored in the Log Domain?

Question33: What is the buffer size set by the fw ctl zdebug command?

Question34: What is the main SecureXL database for tracking the acceleration status of traffic?

Question35: Which file is commonly associated with troubleshooting crashes on a system such as the Security Gateway?

Question36: When a User Mode process suddenly crashes it may create a core dump file. Which of the following information is available in the core dump and may be used to identify the root cause of the crash?
i Program Counter
ii Stack Pointer
ii. Memory management information
iv Other Processor and OS flags / information

Question37: When a User process or program suddenly crashes, a core dump is often used to examine the problem. Which command is used to enable the core-dumping via GAIA dish?

Question38: What is the name of the VPN kernel process?

Question39: You are running R80.XX on an open server and you see a high CPU utilization on your 12 CPU cores You now want to enable Hyperthreading to get more cores to gain some performance. What is the correct way to achieve this?

Question40: What is NOT a benefit of the fw ctl zdebug command?

Question41: When running a debug with fw monitor, which parameter will create a more verbose output?

Question42: Which one of the following is NOT considered a Solr core partition:

Question43: During firewall kernel debug with fw ctl zdebug you received less information than expected. You noticed that a lot of messages were lost since the time the debug was started. What should you do to resolve this issue?

Question44: How can you increase the ring buffer size to 1024 descriptors?

Question45: Check Point Threat Prevention policies can contain multiple policy layers and each layer consists of its own Rule Base Which Threat Prevention daemon is used for Anti-virus?

Question46: What is the function of the Core Dump Manager utility?

Question47: What does SIM handle?

Question48: Some users from your organization have been reporting some connection problems with CIFS since this morning You suspect an IPS issue after an automatic IPS update last night. So you want to perform a packet capture on uppercase I only directly after the IPS chain module (position 4 in the chain) to check If the packets pass the IPS. What command do you need to run?