156-587 Check Point Exam Practice Questions
Uploaded by
certquestionsbank156-587 Check Point Exam Practice Questions
Uploaded by
certquestionsbankThis PDF contains a set of carefully selected practice questions for the
156-587 exam. These questions are designed to reflect the structure,
difficulty, and topics covered in the actual exam, helping you reinforce
your understanding and identify areas for improvement.
What's Inside:
1. Topic-focused questions based on the latest exam objectives
2. Accurate answer keys to support self-review
3. Designed to simulate the real test environment
4. Ideal for final review or daily practice
Important Note:
This material is for personal study purposes only. Please do not
redistribute or use for commercial purposes without permission.
For full access to the complete question bank and topic-wise explanations, visit:
CertQuestionsBank.com
Our YouTube: https://www.youtube.com/@CertQuestionsBank
FB page: https://www.facebook.com/certquestionsbank
Share some 156-587 exam online questions below.
1.During firewall kernel debug with fw ctl zdebug you received less information that expected. You
noticed that a lot of messages were lost since the time the debug was started.
What should you do to resolve this issue?
A. Increase debug buffer Use fw ctl debug -buf 32768
B. Redirect debug output to file; Use fw ctl debug -o /debug.elg
C. Redirect debug output to file; Use fw ctl zdebug -o /debug.elg
D. Increase debug buffer; Use fw ctl zdebug -buf 32768
Answer: A
2.Troubleshooting issues with Mobile Access requires the following:
A. 'ma_vpnd' process on Security Gateway
B. Debug logs of FWD captured with the command - ‘fw debug fwd on
TDERROR_MOBILE_ACCESS=5'
C. Standard VPN debugs, packet captures and debugs of cvpnd1 process on Security Gateway
D. Standard VPN debugs and packet captures on Security Gateway, debugs of 'cvpnd' process on
Security Management
Answer: C
3.What command is used to find out which port Multi-Portal has assigned to the Mobile Access
Portal?
A. mpcient getdata sslvpn
B. netstat -nap | grep mobile
C. netstat getdata sslvpn
D. mpclient getdata mobi
Answer: A
4.What command(s) will turn off all vpn debug collection?
A. vpn debug -a off
B. fw ctl debug 0
C. vpn debug off
D. vpn debug off and vpn debug Ikeoff
Answer: D
5.Captive Portal, PDP and PEP run in what space?
A. User
B. CPM
C. FWD
D. Kernel
Answer: A
6.What is the buffer size set by the fw ctl zdebug command?
A. 8GB
B. 1 MB
C. 1 GB
D. 8 MB
Answer: B
7.The FileApp parser in the Content Awareness engine does not extract text from which of the
following file types?
A. Microsoft Office Excel files
B. Microsoft Office PowerPoint files
C. Microsoft Office.docx files
D. PDFs
Answer: D
8.Which of these packet processing components stores Rule Base matching state-related
information?
A. Observers
B. Classifiers
C. Manager
D. Handlers
Answer: A
Explanation:
The Terraform Registry allows any user to publish and share modules. Published modules support
versioning, automatically generate documentation, allow browsing version histories, show examples
and READMEs, and more. Public modules are managed via Git and GitHub, and publishing a module
takes only a few minutes. Once a module is published, releasing a new version of a module is as
simple as pushing a properly formed Git tag1.
Reference = The information can be verified from the Terraform Registry documentation on
Publishing Modules provided by HashiCorp Developer1.
9.What process monitors terminates, and restarts critical Check Point processes as necessary?
A. CPM
B. FWD
C. CPWD
D. FWM
Answer: C
Explanation:
CPWD (Check Point WatchDog) is the process that monitors, terminates (if necessary), and restarts
critical Check Point processes (e.g., FWD, FWM, CPM) when they stop responding or crash.
CPM (Check Point Management process) is a process on the Management Server responsible for the
web-based SmartConsole connections, policy installations, etc.
FWD (Firewall Daemon) handles logging and communication functions in the Security Gateway.
FWM (FireWall Management) is an older reference to the management process on the Management
Server for older versions.
Therefore, the best answer is CPWD.
Check Point Troubleshooting Reference
sk97638: Check Point WatchDog (CPWD) process explanation and commands.
R81.20 Administration Guide C Section on CoreXL, Daemons, and CPWD usage.
sk105217: Best Practices C Explains system processes, how to monitor them, and how CPWD is
utilized.
10.You need to run a kernel debug over a longer period of time as the problem occurs only once or
twice a week Therefore you need to add a timestamp to the kernel debug and write the output to a
file.
What is the correct syntax for this?
A. fw ctl debug -T -f > filename debug
B. fw ctl kdebug -T -f -o filename debug
C. fw ell kdebug -T > filename debug
D. fw ctl kdebug -T -f > filename.debug
Answer: B
11.What component is NOT part of Unified policy manager?
A. Classifier
B. CMI
C. Handle
D. Observer
Answer: D
12.Packet processing infrastructure consists of the following components EXCEPT:
A. Observers
B. Manager
C. Client
D. Classifiers
Answer: C
