CheckPoint 156-586 Exam Syllabus Topics:
| Section | Weight | Objectives |
|---|---|---|
| Topic 1: Advanced Troubleshooting Techniques | 8% | - Debugging user-mode and kernel-mode processes - Interpreting debugs and logs |
| Topic 2: Security Management Server Troubleshooting | 20% | - Policy installation and synchronization problems - Database and configuration issues - Management server processes and services |
| Topic 3: Security Gateway & Firewall Troubleshooting | 25% | - NAT and routing problems - Access control and security policy issues - High Availability and cluster synchronization - Kernel and chain module debugging |
| Topic 4: VPN Troubleshooting | 15% | - VPN encryption and tunnel problems - Site-to-Site VPN connectivity and IKE negotiation - Remote Access VPN and Mobile Access issues |
| Topic 5: Threat Prevention & Advanced Features | 12% | - IPS and Threat Prevention troubleshooting - Performance and resource utilization problems - Identity Awareness and user access issues |
| Topic 6: Troubleshooting Methodology & Tools | 20% | - Gaia OS system and process troubleshooting - Packet capture and traffic analysis - Diagnostic utilities: CPInfo, CPView, Logs, SmartLog, SmartEvent |
CheckPoint Check Point Certified Troubleshooting Expert - R81 Sample Questions:
Question #1
Check Point Access Control Daemons contains several daemons for Software Blades and features. Which Daemon is used for Application & Control URL Filtering?
A. rad
B. pepd
C. pdpd
D. cprac
Question #2
In Mobile Access VPN, clientless access is done using a web browser. The primary communication path for these browser based connections is a process that allows numerous processes to utilize port 443 and redirects traffic to a designated port of the respective process. Which daemon handles this?
A. Connectra VPN Daemon (cvpnd)
B. HTTPS Inspection Daemon (HID)
C. Multi-portal Daemon
D. Mobile Access Daemon (MAD)
Question #3
Troubleshooting issues with Mobile Access requires the following:
A. 'ma_vpnd' process on Security Gateway
B. Debug logs of FWD captured with the command - 'fw debug fwd on
TDERROR_MOBILE_ACCESS=5'
C. Standard VPN debugs, packet captures, and debugs of 'cvpnd' process on Security Gateway
D. Standard VPN debugs and packet captures on Security Gateway, debugs of 'cvpnd' process on Security Management
Question #4
The Check Point Watch Daemon (CPWD) monitors critical Check Point processes, terminating them or restarting them as needed to maintain consistent, stable operating conditions. When checking the status/output of CPWD you are able to see some columns like APP, PID, STAT, START, etc. What is the column "STAT" used for?
A. Shows the Watch Dog name of the monitored process
B. Shows what monitoring method Watch Dog is using totrack the process
C. Shows the status of the monitored process
D. Shows how many times the Watch Dog started the monitored process
Question #5
You need to run a kernel debug over a longer period of time as the problem occurs only once or twice a week.
Therefore, you need to add a timestamp to the kernel debug and write the output to a file but you can't afford to fill up all the remaining disk space and you only have 10 GB free for saving the debugs. What is the correct syntax for this?
A. fw ctl kdebug -T -f -m 10 -s 1000000 -o debugfilename
B. fw ctl debug -T -f -m 10 -s 1000000 -o debugfilename
C. fw ctl kdebug -T -f -m 10 -s 1000000 > debugfilename
D. fw ctl kdebug-T -m 10 -s 1000000 -o debugfilename
Solutions:
| Question #1 Correct Answer: C | Question #2 Correct Answer: C | Question #3 Correct Answer: A | Question #4 Correct Answer: C | Question #5 Correct Answer: A |
1186 Customer Reviews
Quality and ValueITCertKing Practice Exams are written to the highest standards of technical accuracy, using only certified subject matter experts and published authors for development - no all study materials.
Tested and ApprovedWe are committed to the process of vendor and third party approvals. We believe professionals and executives alike deserve the confidence of quality coverage these authorizations provide.
Easy to PassIf you prepare for the exams using our ITCertKing testing engine, It is easy to succeed for all certifications in the first attempt. You don't have to deal with all dumps or any free torrent / rapidshare all stuff.
Try Before BuyITCertKing offers free demo of each product. You can check out the interface, question quality and usability of our practice exams before you decide to buy.
