Note! Following 156-586 Exam is Retired now. Please select the alternative replacement for your Exam Certification. The new exam code is 156-587

156-586 Exam Dumps - Check Point Certified Troubleshooting Expert - R81 (CCTE)

Go to page:

Question # 17

Which of the following is contained in the System Domain of the Postgres database?

Trusted GUI clients

Configuration data of log servers

Saved queries for applications

User modified configurations such as network objects

Full Access

Question # 18

You are using the Identity Collector with Identity Awareness in large environment. Users report that they cannot access resources on Internet. You identify that the traffic is matching the cleanup rule instead of the proper rule with Access Roles using the IDC. How can you check if IDC is working?

pep debug idc on

pdp debug set IDP all all

ad query | debug on

pdp connections idc

Full Access

Question # 19

Troubleshooting issues with Mobile Access requires the following:

Standard VPN debugs and packet captures on Security Gateway, debugs of â€˜cvpndâ€™ process on Security Management

Debug logs of FWD captured with the command - â€˜fw debug fwd on TDERROR_MOBILE_ACCESS=5â€™

â€˜ma_vpndâ€™ process on Security Gateway

Standard VPN debugs, packet captures, and debugs of â€˜cvpndâ€™ process on Security Gateway

Full Access

Question # 20

Which of the following file is commonly associated with troubleshooting crashes on a system such as the Security Gateway?

fw monitor

CPMIL dump

core dump

tcpdump

Full Access

Question # 21

During firewall kernel debug with fw ctl zdebug you received less information that expected. You noticed that a lot of messages were lost since the time the debug was started. What should you do to resolve this issue?

Increase debug buffer; Use fw ctl debug -buf 32768

Redirect debug output to file; Use fw ctl debug -o ./debug.elg

Redirect debug output to file; Use fw ctl zdebug -o ./debug.elg

Increase debug buffer; Use fw ctl zdebug -buf 32768

Full Access

Question # 22

What is the simplest and most efficient way to check all dropped packets in real time?

tail -f $FWDIR/log/fw.log |grep drop in expert mode

cat /dev/fw1/log in expert mode

fw ctl zdebug + drop in expert mode

Smartlog

Full Access