156-115.80 Check Point Certified Security Master - R80 Questions and Answers

Which file would you need to make sure you collect when debugging a VPN that fails to establish that is configured to use IKEv2?

Which command would you use to check CoreXL instances for IPv6 traffic?

Which layer in the IPS blade is responsible for reassembly of TCP packets as they arrive at the gateway?

Which command would show the synchronization statistics between cluster members?

The CPM process uses what ports?

During firewall kernel debug with fw ctl zdebug you received less information than expected. You noticed that a lot of messages were lost since the time the debug was started. What should you do to resolve this issue?

What is enabled by the command “vpn debug mon”?

If cluster members are geographically separated and the time to detect a failover needs to be longer, what timer needs to be adjusted?

The CPSizeMe script will run how long by default?

A Firewall administrator is attempting to push a policy to a new Security Gateway for a remote office but the installation fails. The Management Server IP is 10.1.1.101. Initial troubleshooting shows that policy is successfully transferred to the Gateway. What command would you use to attempt to identify the cause of the issue?

Consider an IKE debug file that has been generated when debugging an issue with site to site VPN. What is the purpose of a NONCE?

Having a look at the output of the “fwaccel conns” command, the F flag is the indicator for a packet

.

Which templates for SecureXL are not enabled by default?

Which of the following would NOT be a flag when debugging a unified policy?

What command, when combined with IPS traffic, will give you information that can be used to determine if adjustments can be made to improve performance and security?

What ClusterXL mechanism is used to verify that the interfaces of other cluster members are UP and communicates the status of cluster members?

What is the correct command to turn off an IKE debug?

What is true about ike.elg file?

Which of the following file is commonly associated with troubleshooting crashes on a system such as the Security Gateway?

You suspect that IPS protections may be dropping legitimate traffic by mistake. To reduce the false positives, what GuiDBedit parameter could you enable to work with fw ctl zdebug drop to generate a more elaborate drop message for these packets?