QUESTION 11
When dealing with monolithic operating systems such as Gaia, where are system calls initiated from to achieve a required system level function?

QUESTION 12
The Check Point Watch Daemon (CPWD) monitors critical Check Point processes, terminating them or restarting them as needed to maintain consistent, stable operating conditions. When checking the status/output of CPWD you are able to see some columns like APP, PID, STAT, START, etc. What is the column “STAT” used for?

QUESTION 13
User defined URLS and HTTPS Inspection User defined URLs on the Security Gateway are stored in which database file?

QUESTION 14
What command is used to find out which port Multi-Portal has assigned to the Mobile Access Portal?

QUESTION 15
How can you start debug of the Unified Policy with all possible flags turned on?

QUESTION 16
What are the three main component of Identity Awareness?

QUESTION 17
For Identity Awareness, what is the PDP process?

QUESTION 18
What are the main components of Check Point’s Security Management architecture?

QUESTION 19
Captive Portal, PDP and PEP run in what space?

QUESTION 20
Which of these packet processing components stores Rule Base matching state-related information?

QUESTION 21
An administrator receives reports about issues with log indexing and text searching regarding an existing Management Server. In trying to find a solution she wants to check if the process responsible for this feature is running correctly. What is true about the related process?

QUESTION 22
The FileApp parser in the Content Awareness engine does not extract text from which of the following file types?

QUESTION 23
What cli command is run on the GW to verify communication to the Identity Collector?

QUESTION 24
SmartEvent utilizes the Log Server, Correlation Unit and SmartEvent Server to aggregate logs and identify security events. The three main processes that govern these SmartEvent components are:

QUESTION 25
Which Daemon should be debugged for HTTPS Inspection related issues?

QUESTION 26
You receive reports that Users cannot browse internet sites. You are using identity awareness with AD Query and Identity Collector in addition you have the Browser Based Authentication Enabled. What command can be used to debug the problem?

QUESTION 27
If the cpsemd process of SmartEvent has crashed or is having trouble coming up, then it usually indicates that
__________.