<< Prev Question Next Question >>

Question 228/279

You are a system administrator and you are working with Support. Support asked you to enable kernel core dumps on the files. You are unsure if this has already been set. You run the command chkconfig -list kdump. Does the screen capture tell you if kernel dumps are enabled on this gateway?

LEAVE A REPLY

Your email address will not be published. Required fields are marked *

Question List (279q)
Question 1: What is the log file that shows the processes that participa...
Question 2: You are finding that some users are complaining about slow c...
Question 3: You are analyzing your firewall logs, /var/log/messages, and...
Question 4: What debug file would you check to see what IKE version is b...
Question 5: How do you designate the "enforcement point gateway" for the...
Question 6: The fw tab -t ___________ command displays the NAT table....
Question 7: What command can be used to get the following output? (Exhib...
Question 8: You are troubleshooting a Security Gateway, attempting to de...
Question 9: Using the default values in R77 how many kernel instances wi...
Question 10: A new packet has arrived to a firewall's interface. The pack...
Question 11: What command displays the Connections Table for a specified ...
Question 12: You are using an IPV6 environment and find that you need add...
Question 13: You are adding a new gateway into your network. You must mak...
Question 14: Which process should you debug when SmartDashboard authentic...
Question 15: Of the following answer choices, which best describes a poss...
Question 16: You find that your open server SecurePlatform system is lagg...
Question 17: What mechanism solves asymmetric routing issues in a load sh...
Question 18: What operating systems support unnumbered VTIs?...
Question 19: Which command will allow you to change firewall affinity and...
Question 20: How can an administrator stay up-to-date on the status of th...
Question 21: Your customer reports that the time on the standby cluster m...
Question 22: You run the command fwaccel conns and notice in the output t...
Question 23: How do you add the route entry for the "Enforcement Point Ga...
Question 24: What is the corresponding connection template entered into t...
Question 25: You have set up a manual NAT rule, however fw monitor shows ...
Question 26: Tom is troubleshooting NAT issues using fw monitor and Wires...
Question 27: Which command should you run to debug the VPN-1 kernel modul...
Question 28: You are configuring VTIs in a clustered environment. On Peer...
Question 29: How many sync interfaces are supported on Check Point R77 GA...
Question 30: Which file holds global Kernel values to survive reboot in a...
Question 31: Which command clears all the connection table entries on a S...
Question 32: How does the "Directional Enforcement" rule manage subsequen...
Question 33: You are a system administrator and would like to configure G...
Question 34: What flag option(s) must be used to dump the complete table ...
Question 35: What happens to manual changes in the file $FWDIR/conf/local...
Question 36: Which information CANNOT be displayed by issuing the command...
Question 37: What command verifies which core each gateway interface and ...
Question 38: What utility would you use to configure route-based VPNs?...
Question 39: When viewing a NAT Table, What represents the second hexadec...
Question 40: Your customer receives an alert from their network operation...
Question 41: You are configuring a VTI in a clustered environment. Which ...
Question 42: Why would you not see a CoreXL configuration option in cpcon...
Question 43: The user tried to connect in SmartDashboard and did not work...
Question 44: While troubleshooting high CPU usage on cores 3 and 4 on a c...
Question 45: You would like to import SNORT rules but to comply with corp...
Question 46: When you perform an install database, the status window is f...
Question 47: You are configuring OSPF on your Secure Platform firewall. Y...
Question 48: When troubleshooting a performance problem on multicore fire...
Question 49: You have strict IPS corporate guidelines. This is having a p...
Question 50: Jane wants to create a VPN using OSPF. Which VPN configurati...
Question 51: You are troubleshooting an issue for your HR team. One of th...
Question 52: Which commands will properly set the debug level to maximum ...
Question 53: Which routing protocols are not supported with GAIA OS runni...
Question 54: The command fw ctl kdebug &lt;params&gt; is used to:...
Question 55: What is the function of the setting "no_hide_services_ports"...
Question 56: When a cluster member is completely powered down, how will t...
Question 57: Adam wants to find idle connections on his gateway. Which co...
Question 58: In some situations, switches may not play nicely with a Chec...
Question 59: "If the machine is under stress, we do not want to leave the...
Question 60: What are the common Best Practices for configuring QoS over ...
Question 61: A firewall administrator knows the details of the packet hea...
Question 62: With the default ClusterXL settings what will be the state o...
Question 63: How can you see a dropped connection and the cause from the ...
Question 64: Ann wants to hide FTP traffic behind the virtual IP of her c...
Question 65: When using the command fw monitor, what command ensures the ...
Question 66: You have configured IPS on your network; you find you are be...
Question 67: Look at the follow Rule Base display. Rule 5 contains a TIME...
Question 68: What command allows you to monitor IPV6 packets in the kerne...
Question 69: How does the Check Point Security Administrator enable NAT T...
Question 70: When are rules that include identity awareness access roles ...
Question 71: Where can you configure OSPF on a GAiA firewall?...
Question 72: You have spent time configuring the IPS profile on your prim...
Question 73: When are rules that include Identity Awareness Access (IDA) ...
Question 74: How do you disable IPv6 on an IPSO gateway?...
Question 75: When performing a fwm debug, to which directory are the logs...
Question 76: What would the following command fw monitor tell you? (Exhib...
Question 77: You are configuring dynamic routing on Secure Platform, as t...
Question 78: Which of the following IPS Layers is the "brain" of the IPS?...
Question 79: Where would you go to adjust the number of Kernels in CoreXL...
Question 80: In the gateway object, under topology you select the "Get Al...
Question 81: Which operating systems support Wire mode?...
Question 82: Which of the following is a valid synchronization status as ...
Question 83: Given the following IKEView output, what do we know about Qu...
Question 84: Which directory below contains the URL Filtering engine upda...
Question 85: While troubleshooting a DHCP relay issue, you run a fw ctl z...
Question 86: Which is NOT a valid upgrade method in an R77 GAiA ClusterXL...
Question 87: What is the limit to the number of VPN directions that can b...
Question 88: What command would you use to determine if a particular conn...
Question 89: What type of connections cannot be templated?...
Question 90: What type(s) of VTI interfaces do Edge gateways support?...
Question 91: OF the following, which is NOT a kernel parameter relating t...
Question 92: Since R76 GAiA, what is the method for configuring proxy ARP...
Question 93: You want to verify that the majority of your connections are...
Question 94: Which definition best describes the file table.def function?...
Question 95: In your SecurePlatform configuration you need to set up a ma...
Question 96: What do the 'F' flags mean in the output of fwaccel conns?...
Question 97: Where in a fw monitor output would you see source address tr...
Question 98: The command _____________ shows which firewall chain modules...
Question 99: CoreXL on IPSO R77.20 does NOT support which of the followin...
Question 100: Your company has recently decided to allow remote access for...
Question 101: Which of the following commands shows the high watermark thr...
Question 102: Your Customer would like to enable IPS in his Corporate Clus...
Question 103: What would be considered Best Practice to determine which IP...
Question 104: Which of the following is true when IPv6 is enabled on a Sec...
Question 105: Which of the following IPS Layers is responsible for ensurin...
Question 106: Where do you run the command get_ips_statistics.sh from?...
Question 107: When configuring a Numbered VPN-Tunnel, what parameters are ...
Question 108: Consider the following Rule Base; (Exhibit) What can be conc...
Question 109: Does R77 SmartDashboard support IPv6?...
Question 110: Which flag in the fw monitor command is used to print the po...
Question 111: How to check the overall SecureXL statistics:...
Question 112: You are attempting to establish an FTP session between your ...
Question 113: What would be a reason to use the command cphaosu stat?...
Question 114: The "Hide internal networks behind the Gateway's external IP...
Question 115: Which of the following CANNOT be used as a source/destinatio...
Question 116: How would you determine the value of 'Maximum concurrent con...
Question 117: The current release of Check Point R77, what is a potential ...
Question 118: In R77, Under what circumstances would IPS bypass be enforce...
Question 119: Which feature is not supported with unnumbered VTI?...
Question 120: What is the command to check how many connections the firewa...
Question 121: Your customer has an R77 Multi-domain Management Server mana...
Question 122: What will be the outcome if you set the kernel parameters cp...
Question 123: What should you do after editing fwkern.conf to enable NAT t...
Question 124: What VSX components do not support IPv6 in R77 VSX mode?...
Question 125: John is a Security Administrator of a Check Point platform. ...
Question 126: Which command will NOT display information related to memory...
Question 127: How do you set up Port Address Translation?...
Question 128: You are running an inventory process within your corporate e...
Question 129: You are experiencing an issue where Endpoint Connect client ...
Question 130: The 'Maximum Entries' value in the GAiA Portal corresponds t...
Question 131: In IPS what does a high confidence rating mean?...
Question 132: According to this Rule Base, templates will be created until...
Question 133: Where can you configure Wire mode?...
Question 134: Remote VPN clients can initiate connections with internal ho...
Question 135: The CoreXL software architecture includes the Secure Network...
Question 136: When the IPS 'Bypass under Load' mechanism detects that the ...
Question 137: What command should a firewall administrator use to begin de...
Question 138: Check Point Best Practices suggest that when you finish a ke...
Question 139: In a VPN configuration, the following mode can be used to in...
Question 140: Which file should be edited to modify ClusterXL VIP Hide NAT...
Question 141: Which of the following is NEVER affected by incorrect OS tim...
Question 142: Extended Cluster Anti-Spoofing checks what value to determin...
Question 143: You have just taken over as a firewall administrator. Your c...
Question 144: Which of the following is true about Node / Host objects?...
Question 145: After creating and pushing out a new policy, Joe finds that ...
Question 146: Which of these commands can be used to display the IPv6 stat...
Question 147: Which of these commands can be used to display the IPv6 rout...
Question 148: In an HA cluster, you modify the number of cores given to Co...
Question 149: Where do you configure the file user.def to change the encry...
Question 150: Where would you find CPU information like model, number of c...
Question 151: What is the method to change the number of cores that CoreXL...
Question 152: You have just configured HA and find that connections are no...
Question 153: What does "cphwd_nat_templates_enabled=1" do when entered in...
Question 154: Which command would a troubleshooter use to verify table con...
Question 155: You want to enable OSPF on Secure Platform, but you notice t...
Question 156: What command would you use for a packet capture on an absolu...
Question 157: In Tracker you are troubleshooting a VPN issue between your ...
Question 158: You are trying to set "VPN Directional Match" on the VPN col...
Question 159: In order to perform some connection troubleshooting, you run...
Question 160: Running the command fw ctl pstat -l would return what inform...
Question 161: You run the command fw tab -t connections -s on both members...
Question 162: ACME Corp has a cluster consisting of two 13500 appliances. ...
Question 163: You are having issues with dynamic routing after a failover....
Question 164: True or False: Software blades perform their inspection prim...
Question 165: Which of the these dynamic route protocols CANNOT be used al...
Question 166: What is required when changing the configuration of the numb...
Question 167: If you need to use a Domain object in the Rule Base, where s...
Question 168: Under which scenario would you most likely consider the use ...
Question 169: Your cluster member is showing a state of "Ready". Which of ...
Question 170: When troubleshooting a VPN site-to-site to a peer, it may be...
Question 171: Which of the following statements are TRUE about SecureXL? I...
Question 172: You issue the command fwaccel stat and see the following: (E...
Question 173: Compare these two images to establish which blade/feature wa...
Question 174: A Security Administrator wants to increase the amount of pro...
Question 175: Which command can be used to see all active modules on the S...
Question 176: Which program could you use to analyze Phase I and Phase II ...
Question 177: What command would you use to view which debugs are set in y...
Question 178: When using Geo Protections, you find there are logs for a co...
Question 179: Certain rules will disable connection rate acceleration (tem...
Question 180: While troubleshooting a connectivity issue with an internal ...
Question 181: What are the kernel parameters that control "Magic MACs"?...
Question 182: From the output of the following cphaprob -i list, what is t...
Question 183: The command that lists the firewall kernel modules on a Secu...
Question 184: "Tuning" IPS protections to suit the specific needs of an en...
Question 185: Which command displays compression/decompression statistics?...
Question 186: What causes the SIP Early NAT chain module to appear in the ...
Question 187: Which of the following statements about Full HA support with...
Question 188: Which command displays FireWall internal statistics about me...
Question 189: SecureXL uses templating to accelerate traffic passing throu...
Question 190: A firewall has 8 CPU cores and the correct license. CoreXL i...
Question 191: You are at a customer site, and when you run cphaprob stat y...
Question 192: Misha is working on a stand-by firewall and deletes the conn...
Question 193: For URL Filtering in the Cloud in R75 and above, what table ...
Question 194: Which of the following BEST describes the command fw ctl cha...
Question 195: You are in VPN troubleshooting with a Partner and you suspec...
Question 196: The command fw monitor -p all displays what type of informat...
Question 197: You are configuring dynamic VPN routing using OSPF. You have...
Question 198: Your gateway object is currently defined with a max connecti...
Question 199: How would one enable 'INSPECT debugging' if one suspects IPS...
Question 200: What command would give you a summary of all the tables avai...
Question 201: When optimizing a customer firewall Rule Base, what is the B...
Question 202: To check what is currently set in the Firewall kernel debug ...
Question 203: How do you clear the connections table?...
Question 204: When VPN user-based authentication fails, which of the follo...
Question 205: What is one way to check cluster status on two gateways runn...
Question 206: Tom has a Web server for which he has created a manual NAT r...
Question 207: You run the commands: fw ctl debug 0 fw ctl debug -buf 32000...
Question 208: What is the log file that shows the keep alive packets durin...
Question 209: Henry is attempting to verify VPN connectivity between two h...
Question 210: Where can you configure Wire mode?...
Question 211: In a production environment, your gateway is configured to a...
Question 212: You are running a debugging session and you have set the deb...
Question 213: Server A is subject to automatically static NAT and also res...
Question 214: If the number of Firewall Workers for CoreXL is set higher o...
Question 215: In the process of troubleshooting traffic issues across a VP...
Question 216: You have a requirement to implement a strict security policy...
Question 217: How do you enable IPv6 support on a R77 gateway running the ...
Question 218: You are trying to troubleshoot a NAT issue on your network, ...
Question 219: From a Best Practices perspective, what percentage of your p...
Question 220: You have to establish a VPN communication between 2 spokes, ...
Question 221: You have a user-defined SMTP trap configured to send an aler...
Question 222: What command would you use to check if CoreXL is enabled?...
Question 223: Why would you choose to combine dynamic routing protocols an...
Question 224: Which of the following is NOT a cphaprob status?...
Question 225: What considerations are required when configuring IPV6 with ...
Question 226: A fwm debug provides the following output. What prevents the...
Question 227: True or False: It is possible to operate a Security Gateway ...
Question 228: You are a system administrator and you are working with Supp...
Question 229: One of IPS Layers' main functions are to ensure compliance t...
Question 230: what command other than fw ctl pstat, will display your peak...
Question 231: What would be a reason for changing the "Magic MAC"?...
Question 232: Which command should you use to stop kernel module debugging...
Question 233: What is the best way to see how much traffic went through th...
Question 234: You would like to configure unnumbered VTIs and your environ...
Question 235: Your ARP cache is overflowing negatively impacting users exp...
Question 236: When running a SecureXL debug how do you initialize the debu...
Question 237: Which technology is not supported with route-based VPNs?...
Question 238: In Check Point, Domain-based VPN's take precedence over rout...
Question 239: Which Dynamic Routing Protocols are supported in GAiA in a R...
Question 240: You are troubleshooting a VPN issue between your gateway and...
Question 241: You are setting up VPN between two gateways Local-GW and New...
Question 242: The command fwaccel stat displays what information?...
Question 243: You want to run VPN debug that will generate both ike.elg an...
Question 244: You are attempting to establish a VPN tunnel between a Check...
Question 245: In order to prevent outgoing NTP traffic from being hidden b...
Question 246: Which FW-1 kernel flags should be used to properly debug and...
Question 247: What does the IP Options Strip represent under the fw chain ...
Question 248: After disabling SecureXL you ran command fw monitor to help ...
Question 249: When performing a Clean IPS procedure to resolve a corrupt I...
Question 250: Given the screen configuration shown, the failure's probable...
Question 251: The file ike.elg is a log file used to log IKE negotiations ...
Question 252: PXL is considered to be what type of acceleration?...
Question 253: What is the difference between "connection establishment acc...
Question 254: When you have your directional VPN enforcement rule set to "...
Question 255: Which of the following items is NOT part of the columns of t...
Question 256: When finished running a debug on the Management Server using...
Question 257: Where do you configure VTIs on your R77 gateway in VSX mode?...
Question 258: What command show the same information as fwaccel stats -l?...
Question 259: When viewing connections using the command fw tab -t connect...
Question 260: What does the command fwaccel templates do?...
Question 261: In IKEView while troubleshooting a VPN issue between your ga...
Question 262: What is the best way to see how a firewall is performing whi...
Question 263: You have created a number of profiles and activated the rele...
Question 264: Jerry is a network administrator for ACME Co. Their network ...
Question 265: Which command will you run to list established VPN tunnels?...
Question 266: Your customer has a well optimized Rule Base with most traff...
Question 267: In IPS which of the two initial profiles is the more resourc...
Question 268: Where would an administrator set an email alert for a specif...
Question 269: What file contains IKEv2 debug messages?...
Question 270: You are running some diagnostics on your GAIA gateway. You a...
Question 271: Which of the following IPS Layers is a set of signatures and...
Question 272: What does the output of the commands fw ctl multik stat and ...
Question 273: In the policy below, which rule disables SecureXL? (Exhibit)...
Question 274: In Wire mode. if a packet reaches the gateway from a trusted...
Question 275: While troubleshooting a VPN issue between your gateway and a...
Question 276: Your company has grown significantly over the past few month...
Question 277: From which version can you add Proxy ARP entries through the...
Question 278: What steps can be taken if IPS is causing a High Performance...
Question 279: SNORT is a popular open source IDS, you would like to import...