What is the default and maximum number of entries in the ARP Cache Table in a Check Point appliance?
A. 1,024 and 4,096
B. 4,096 and 16,384
C. 4,096 and 65,536
D. 1,024 and 16,384
What is the command to check the current status of hyper-threading?
A. fw ctl get int cphwd_hyper_status
B. fw ctl multik stat
C. cat/proc/hyperstats
D. cat/proc/smt_status
Which database domain stores URL filtering updates?
A. Threat Prevention Domain
B. Application Control domain
C. IPS Domain
D. Check Point Data Domain
Which Check Point utility should be used to assist in analyzing the output of vpn and ike debug?
A. cpview
B. cpinfo
C. ikeview
D. vpnview
A Firewall administrator is attempting to push a policy to a new Security Gateway for a remote office but the installation fails. The Management Server IP is 10.1.1.101. Initial troubleshooting shows that policy is successfully transferred to the Gateway. What command would you use to attempt to identify the cause of the issue?
A. fw ctl debug –T –f > /var/log/p_debug.txt
B. cp_merge export_policy –s 10.1.1.101 –n Standard $var/log/
C. fw ctl debug –m 10.1.1.101
D. fw fetchlocal –d $FWDIR/state/_tmp/FW1
Which templates for SecureXL are not enabled by default?
A. All templates are disabled by default
B. Accept and NMR
C. Drop and NAT
D. All templates are enabled by default
While using IPS, the network performance is being impacted on a load sharing cluster with asymmetric routes. What is most likely causing the degradation?
A. A failure in the sync network protocol
B. A static NAT has been configured and an IPS protection requires the connection be handled on the same cluster member
C. CoreXL has been disabled
D. SecureXL has been disabled
IPS detection incorporates 4 layers. Which of the following is NOT a layer in IPS detection?
A. Context Management
B. Protocol Parsers
C. Protections
D. Detections
Consider the IPv6 address: 2101:0DA0:080B:4114:0000:0000:0000:0001. According to IPv6 IP shortening rules, what address can this be shortened to?
A. 2101:0DA0:080B:4114::8:0
B. 2101:0DA0:80B:4114::0
C. 2101:0DA0:080B:4114::8:1
D. 2101:0DA0:80B:4114::1
On a production Check Point Gateway that is running Check Point Acceleration features, is it possible to reset SIC without affecting the production machines?
A. Yes, use the cp_conf command
B. No, Reset SIC using cpconfig during a change window
C. Yes, use the vi utility to edit CP HKLM_registry.data Registry File
D. No, Reset SIC on the Gateway first and then in SmartConsole