The Check Point Firewall Kernel is the core component of the Gaia operating system and an integral part of the traffic inspection process. There are two procedures available for debugging the firewall kernel. Which procedure/command is used for troubleshooting packet drops and other kernel activities while using minimal resources (1 MB buffer)?

1. A. fw ctl zdebug
2. B. fwk ell debug
3. C. fw debug ctl
4. D. fw ctl debug/kdebug

Correct Answer: A

What is the simplest and most efficient way to check all dropped packets in real time?

1. A. tail -f $FWDIR/log/fw.log |grep drop in expert mode
2. B. cat /dev/fw1/log in expert mode
3. C. fw ctl zdebug + drop in expert mode
4. D. Smartlog

Correct Answer: C

Which of the following would NOT be a flag when debugging a unified policy?

1. A. tls
2. B. rulebase
3. C. clob
4. D. connection

Correct Answer: A

The management configuration stored in the Postgres database is partitioned into several relational database domains. What is the purpose of the Global Domain?

1. A. Global Domains is used by the IPS software blade to map the IDs to the corresponding countries according to the IpToCountry.csv file.
2. B. This domain is used as the global database to back up the objects referencing the corresponding object attributes from the System Domain.
3. C. This domain is used as the global database to track the changes made by multiple administrators on the same objects prior to publishing.
4. D. This domain is used as the global database for MDSM and contains global objects and policies.

Correct Answer: D

Like a Site-to-Site VPN between two Security Gateways, a Remote Access VPN relies on the Internet Key Exchange (IKE) what types of keys are generated by IKE during negotiation?

1. A. Produce a symmetric key on both sides
2. B. Produce an asymmetric key on both sides
3. C. Symmetric keys based on pre-shared secret
4. D. Produce a pair of public and private keys

Correct Answer: D