CheckPoint 156-115.77 問題集

質問 1：
You find that your open server SecurePlatform system is lagging although you know you have plenty of memory and the complexity of the Rule Base has not changed significantly. You think that upgrading the CPU frequency speed could help your performance. Which command could help you see what speed and model of CPU you are using?
A. cat /proc/cpuinfo
B. sysconfig
C. top
D. fw tab
正解：A

質問 2：
While troubleshooting high CPU usage on cores 3 and 4 on a cluster, you notice the following output of fwaccel stats -s:

What could be a possible cause of the high CPU usage?
A. The Secure Network Dispatcher (SND) is working too hard to distribute the traffic to the acceleration layer.
B. Connections are being partially accelerated by SecureXL, but too many packets are still being processed by the firewall kernel.
C. Connections are not being accelerated by SecureXL, and all packets are being forwarded to firewall kernel instances for inspection.
D. The Secure Network Dispatcher (SND) is having to process too much inbound traffic from the NICs.
正解：C

質問 3：
Which command should you use to stop kernel module debugging (excluding SecureXL)?
A. fw debug fwd off; vpn debug off
B. fw ctl debug 0
C. fw ctl zdebug - all
D. fw debug fwd off
正解：B

質問 4：
Your ARP cache is overflowing negatively impacting users experience on your network. Which command can you issue to increase the ARP cache on the fly? You do not need this to survive reboot.
A. You cannot increase the size of the ARP cache on the fly.
B. echo 1024 > /proc/sys/net/ipv4/neigh/default/gc_thresh3
C. Modify the /etc/sysctl.conf: net.ipv4.neigh.default.gc_thresh3 = 1024.
D. arp cache table > 1024
正解：B

質問 5：
SNORT is a popular open source IDS, you would like to import SNORT rules from plain text into Check Point Smart Center. How can you accomplish this?
A. Check Point does not support third party signatures.
B. From the command line, run: ips_export_import import <SNORTprofilename> -f <file-name> [-p <ip>].
C. Under the IPS tree Protections > By Protocol > IPS Software Blade > Application Intelligence > SNORT import and select the SNORT import option.
D. IPS profiles must be manually configured on each gateway.
正解：C

質問 6：
You want to verify that the majority of your connections are being optimized by SecureXL. What command would you run to establish this information?
A. fw ctl pstat
B. fwaccel conns -s
C. fw tab -t connections -s
D. sim_dbg -s
正解：B

質問 7：
When troubleshooting a performance problem on multicore firewall that is using CoreXL, what command checks the number of connections each core is processing?
A. fw CTL pstat
B. sim affinity -l
C. cat fwkern.conf
D. fw ctl multik stat
正解：D