Which of the following is NOT a valid "fwaccel" parameter?

• A.stat
• B.stats
• C.packets
• D.templates

Comment: *

Name: *

Email: *

Verification: *

When a User process or program suddenly crashes, a core dump is often used to examine the problem. Which command is used to enable the core-dumping via GAIA dish?

• A.set core-dump total
• B.set user-dump enable
• C.set core-dump enable
• D.set core-dump per_process

Comment: *

Name: *

Email: *

Verification: *

Which of the following inputs is suitable for debugging HTTPS inspection issues?

• A.fw ctl debug -m fw + conn drop cptls
• B.vpn debug cptls on
• C.fw diag debug tls enable
• D.fw debug tls on TDERROR_ALL_ALL=5

Comment: *

Name: *

Email: *

Verification: *

In Security Management High Availability, if the primary and secondary managements, running the same version of R80.x, are in a state of 'Collision', how can this be resolved?

• A.Reset the SIC of the secondary management server
• B.Run the command 'fw send synch force' on the primary server and 'fw get sync quiet' on the secondary server
• C.Administrator should manually synchronize the servers using SmartConsole
• D.The Collision state does not happen in R80.x as the synchronizing automatically on every publish action

Comment: *

Name: *

Email: *

Verification: *

Joey is configuring a site-to-site VPN with his business partner. On Joey's site he has a Check Point R80.10 Gateway and his partner uses Cisco ASA 5540 as a gateway.
Joey's VPN domain on the Check Point Gateway object is manually configured with a group object that contains two network objects:
VPN_Domain3 = 192.168.14.0/24
VPN_Domain4 = 192.168.15.0/24
Partner's site ACL as viewed from "show run"
access-list JOEY-VPN extended permit ip 172.26.251.0 255.255.255.0 192.168.14.0 255.255.255.0 access-list JOEY-VPN extended permit ip 172.26.251.0 255.255.255.0 192.168.15.0 255.255.255.0 When they try to establish VPN tunnel, it fails. What is the most likely cause of the failure given the information provided?

• A.Tunnel fails on Joey's site, because he misconfigured IP address of VPN peer.
• B.Tunnel fails on partner site. It is likely that the Cisco ASA 5540 will reject the Phase 2 negotiation. Check Point continues to present its own encryption domain as 192.168.14.0/23, but the peer expects the two distinct networks 192.168.14.0/24 and 192.168.15.0/24.
• C.Tunnel falls on partner site. It is likely that the Cisco ASA 5540 will reject the Phase 2 negotiation. Check Point continues to present its own encryption domain as 192.168.14.0/24 and 192.168.15.0/24, but the peer expects the one network 192.168.14.0/23
• D.Tunnel falls on partner site. It is likely that the Cisco ASA 5540 will reject the Phase 2 negotiation due to the algorithm mismatch.

Comment: *

Name: *

Email: *

Verification: *