EMT Practice Test

1. Question Content...

---

Question1: After kernel debug with "fw ctl debug" you received a huge amount of information. It was saved in a very large file that is difficult to open and analyze with standard text editors. Suggest a solution to solve this issue.

Question2: Check Point Access Control Daemons contains several daemons for Software Blades and features. Which Daemon is used for Application & Control URL Filtering?

Question3: When a User Mode process suddenly crashes, it may create a core dump file. Which of the following information is available in the core dump and may be used to identify the root cause of the crash?
i. Program Counter
ii. Stack Pointer
iii. Memory management information
iv. Other Processor and OS flags / information

Question4: Your users have some issues connecting with Mobile Access VPN to your gateway. How can you debug the tunnel establishment?

Question5: What Check Point process controls logging?

Question6: An administrator receives reports about issues with log indexing and text searching regarding an existing Management Server. In trying to find a solution she wants to check if the process responsible for this feature is running correctly. What is true about the related process?

Question7: What is the correct syntax to turn a VPN debug on and create new empty debug files?

Question8: The management configuration stored in the Postgres database is partitioned into several relational database domains. What is the purpose of the Global Domain?

Question9: What is correct about the Resource Advisor (RAD) service on the Security Gateways?

Question10: Which of the following is contained in the System Domain of the Postgres database?

Question11: If the cpsemd process of SmartEvent has crashed or is having trouble coming up, then it usually indicates that
__________.

Question12: You do not see logs in the SMS. When you login on the SMS shell and run cpwd_admin list you notice that the RFL process is with status T. What command can you run to try to resolve it?

Question13: When dealing with monolithic operating systems such as Gaia, where are system calls initiated from to achieve a required system level function?

Question14: What process monitors, terminates, and restarts critical Check Point processes as necessary?

Question15: The Check Point Firewall Kernel is the core component of the Gaia operating system and an integral part of traffic inspection process. There are two procedures available for debugging the firewall kernel. Which procedure/command is used for detailed troubleshooting and needs more resources?

Question16: What is the kernel process for Content Awareness that collects the data from the contexts received from the CMI and decides if the file is matched by a data type?

Question17: Where will the usermode core files located?

Question18: What is the name of the VPN kernel process?

Question19: In some scenarios it is very helpful to use advanced Linux commands for troubleshooting purposes. Which command displays information about resource utilization for running processes and shows additional information for core utilization and memory?

Question20: Which of these packet processing components stores Rule Base matching state-related information?

Question21: Your users are having trouble opening a Web page and you need to troubleshoot it. You open the Smart Console, and you get the following message when you navigate to the Logs and Monitor "SmartLog is not active or Failed to parse results from server". What is the first thing you can try to resolve it?

Question22: Where do you enable log indexing on the SMS?

Question23: How can you start debug of the Unified Policy with all possible flags turned on?

Question24: What is the best way to resolve an issue caused by a frozen process?

Question25: What is the port for the Log Collection on Security Management Server?

Question26: What command(s) will turn off all vpn debug collection?

Question27: That is the proper command for allowing the system to create core files?

Question28: User defined URLS and HTTPS Inspection User defined URLs on the Security Gateway are stored in which database file?

Question29: You receive reports that Users cannot browse internet sites. You are using identity awareness with AD Query and Identity Collector in addition you have the Browser Based Authentication Enabled. What command can be used to debug the problem?

Question30: You are seeing output from the previous kernel debug. What command should you use to avoid that?

Question31: VPN issues may result from misconfiguration, communication failure, or incompatible default configurations between peers. Which basic command syntax needs to be used for troubleshooting Site-to-Site VPN issues?

Question32: You need to run a kernel debug over a longer period of time as the problem occurs only once or twice a week.
Therefore, you need to add a timestamp to the kernel debug and write the output to a file but you can't afford to fill up all the remaining disk space and you only have 10 GB free for saving the debugs. What is the correct syntax for this?

Question33: Troubleshooting issues with Mobile Access requires the following:

Question34: In Mobile Access VPN, clientless access is done using a web browser. The primary communication path for these browser based connections is a process that allows numerous processes to utilize port 443 and redirects traffic to a designated port of the respective process. Which daemon handles this?

Question35: Which of the following inputs is suitable for debugging HTTPS inspection issues?

Question36: What cli command is run on the GW to verify communication to the Identity Collector?

Question37: You need to run a kernel debug over a longer period of time as the problem occurs only once or twice a week.
Therefore, you need to add a timestamp to the kernel debug and write the output to a file but you can't afford to fill up all the remaining disk space and you only have 10 GB free for saving the debugs. What is the correct syntax for this?