What are the four ways to insert an FW Monitor into the firewallkernel chain?

• A.Relative position using location, relativepositionusing alias, absolute position, all positions
• B.Relative position using geolocation relative position using inertial navigation, absolute position all positions
• C.Absolute position using location, absolute position using alias, relative position, all positions
• D.Absolute position using location, relative position using alias, general position, all positions

Comment: *

Name: *

Email: *

Verification: *

Which command is used to write a kernel debug to a file?

• A.fw ctl debug -S -t > debug.txt
• B.fw ctl kdebug -T -l > debug.txt
• C.fw ctl debug -T -f > debug.txt
• D.fw ctl kdebug -T -f > debug.txt

Comment: *

Name: *

Email: *

Verification: *

Which file is commonly associated with troubleshooting crashes on a system such as the Security Gateway?

• A.fw monitor
• B.tcpdump
• C.CPMIL dump
• D.core dump

Comment: *

Name: *

Email: *

Verification: *

Joey is configuring a site-to-site VPN with his business partner. On Joey's site he has a Check Point R80.10 Gateway and his partner uses Cisco ASA 5540 as a gateway.
Joey's VPN domain on the Check Point Gateway object is manually configured with a group object that contains two network objects:
VPN_Domain3 = 192.168.14.0/24
VPN_Domain4 = 192.168.15.0/24
Partner's site ACL as viewed from "show run"
access-list JOEY-VPN extended permit ip 172.26.251.0 255.255.255.0 192.168.14.0 255.255.255.0 access-list JOEY-VPN extended permit ip 172.26.251.0 255.255.255.0 192.168.15.0 255.255.255.0 When they try to establish VPN tunnel, it fails. What is the most likely cause of the failure given the information provided?

• A.Tunnel falls on partner site. It is likely that the Cisco ASA 5540 will reject the Phase 2 negotiation due to the algorithm mismatch.
• B.Tunnel fails on partner site. It is likely that the Cisco ASA 5540 will reject the Phase 2 negotiation. Check Point continues to present its own encryption domain as 192.168.14.0/23, but the peer expects the two distinct networks 192.168.14.0/24 and 192.168.15.0/24.
• C.Tunnel fails on Joey's site, because he misconfigured IP address of VPN peer.
• D.Tunnel falls on partner site. It is likely that the Cisco ASA 5540 will reject the Phase 2 negotiation. Check Point continues to present its own encryption domain as 192.168.14.0/24 and 192.168.15.0/24, but the peer expects the one network 192.168.14.0/23

Comment: *

Name: *

Email: *

Verification: *

What file extension should be used with fw monitor to allow the output file to be imported and read in Wireshark?

• A..tgz
• B..cap
• C..exe
• D..pcap

Comment: *

Name: *

Email: *

Verification: *