Question 1

The customer is using Check Point appliances that were configured long ago by third-party administrators. Current policy includes different enabled IPS protections and Bypass Under Load function. Bypass Under Load is configured to disable IPS inspections of CPU and Memory usage is higher than 80%. The Customer reports that IPS protections are not working at all regardless of CPU and Memory usage.

What is the possible reason of such behavior?

Options :

A : The kernel parameter ids_assume_stress is set to 0

B : The kernel parameter ids_assume_stress is set to 1

C : The kernel parameter ids_tolerance_no_stress is set to 10

D : The kernel parameter ids_tolerance_stress is set to 10

Answer: D

Question 2

What command sets a specific interface as not accelerated?

Options :

A : noaccel-s<interface1>

B : fwaccel exempt state <interface1>

C : nonaccel -s <interface1>

D : fwaccel -n <intetface1 >

Answer: C

Question 3

What process is responsible for sending and receiving logs in the management server?

Options :

A : FWD

B : CPM

C : FWM

D : CPD

Answer: A

Question 4

Where will the usermode core files be located?

Options :

A : /var/log/dump/usermode

B : /var/suroot

C : SFWDlR/var'log/dump/usermode

D : SCPDIR/var/log/dump/usermode

Answer: A

Question 5

the difference in debugging a S2S or C2S (using Check Point VPN Client) VPN?

Options :

A : there is no difference

B : the C2S VPN uses a different VPN deamon and there a second VPN debug

C : the C2S VPN can not be debugged as it uses different protocols for the key exchange

D : the C2S client uses Browser based SSL vpn and cant be debugged

Answer: D