Q25. If the cpsemd process of SmartEvent has crashed or is having trouble coming up, then it usually indicates that __________.

Q26. What is the best way to resolve an issue caused by a frozen process?

Q27. What does CMI stand for in relation to the Access Control Policy?

Q28. What command(s) will turn off all vpn debug collection?

Q29. Which type of NAT allows both incoming and outgoing connections?

Q30. The Check Point Firewall Kernel is the core component of the Gaia operating system and an integral part of traffic inspection process. There are two procedures available for debugging the firewall kernel. Which procedure/command is used for detailed troubleshooting and needs more resources?

Q31. You are seeing output from the previous kernel debug. What command should you use to avoid that?

Q32. What are the main components of Check Point’s Security Management architecture?

Q33. Which of the following inputs is suitable for debugging HTTPS inspection issues?

Q34. During firewall kernel debug with fw ctl zdebug you received less information that expected. You noticed that a lot of messages were lost since the time the debug was started. What should you do to resolve this issue?

Q35. Which of the following daemons is used for Threat Extraction?

Q36. In some scenarios it is very helpful to use advanced Linux commands for troubleshooting purposes. Which command displays information about resource utilization for running processes and shows additional information for core utilization and memory?

Q37. An administrator receives reports about issues with log indexing and text searching regarding an existing Management Server. In trying to find a solution she wants to check if the process responsible for this feature is running correctly. What is true about the related process?

Q38. You are using the Identity Collector with Identity Awareness in large environment. Users report that they cannot access resources on Internet. You identify that the traffic is matching the cleanup rule instead of the proper rule with Access Roles using the IDC. How can you check if IDC is working?

Q39. After kernel debug with “fw ctl debug” you received a huge amount of information. It was saved in a very large file that is difficult to open and analyze with standard text editors. Suggest a solution to solve this issue.

Q40. What information does the doctor-log script supply?

Q41. Which of the following is a component of the Context Management Infrastructure used to collect signatures in user space from multiple sources, such as Application Control and IPS, and compiles them together into unified Pattern Matchers?

Q42. As a security administrator/engineer in your company, you have noticed that your HQ Check Point Security Management Server is not receiving logs from your HQ Check Point Gateway/Cluster.
To investigate this issue in the command line, you will need to verify which process is running?

Q43. What process monitors, terminates, and restarts critical Check Point processes as necessary?

Q44. User defined URLS and HTTPS Inspection User defined URLs on the Security Gateway are stored in which database file?