Free CheckPoint 156-587 Practice Test & Real Exam Questions

Exam Code/Number: 156-587
Exam Name/Title: Check Point Certified Troubleshooting Expert - R81.20
Certification Provider: CheckPoint
Corresponding Certification: CCTE

Exam Questions: 111
Updated On: Jun 28, 2026

Question #11

What command is usually used for general firewall kernel debugging and what is the size of the buffer that is automatically enabled when using the command?

A. fw ctl kdebug, buffer size is 32000 KB

B. fw ctl zdebug, buffer size is 1 MB

C. fw ctl debug, buffer size is 1024 KB

D. fw ctl zdebug, buffer size is 32768 KB

Discussion 0

Correct Answer: D Vote an answer

Question #12

Which of the following is contained in the System Domain of the Postgres database?

A. Configuration data of log servers

B. Saved queries for applications

C. Trusted GUI clients

D. User modified configurations such as network objects

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #13

You were asked by security team to debug Mobile Access VPN. What processes will you debug?

A. HTTPD and CPVND

B. VPND and IKED

C. SNX daemon

D. IKED

Discussion 0

Correct Answer: A Vote an answer

Question #14

For identity Awareness what is the PDP process?

A. Captive Portal Service

B. Identity server

C. User Auth Database

D. Log Sifter

Discussion 0

Correct Answer: B Vote an answer

Question #15

Where will the usermode core files located?

A. /var/suroot

B. $CPDIR/var/log/dump/usermode

C. /var/log/dump/usermode

D. $FWDIRVar/log/dump/usermode

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #16

How many packets are needed to establish IKEv1?

A. 6

B. Only three packets for main mode

C. 5

D. 8

Discussion 0

Correct Answer: A Vote an answer

Question #17

What is the benefit of fw ctl debug over fw ctl zdebug?

A. It allows you to debug multiple modules at the same time

B. You only need 1MB buffer

C. There is no difference Both are used for debugging kernel

D. You don't need timestamps

Discussion 0

Correct Answer: A Vote an answer

Question #18

You run a free-command on a gateway and notice that the Swap column is not zero Choose the best answer

A. Swap memory is used for heavy connections when RAM memory is full

B. Its ole Swap is used to increase performance

C. Swap file is used regularly because RAM memory is reserved for management traffic

D. Utilization of ram is high and swap file had to be used

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #19

What are the main components of Check Point's Security Management architecture?

A. Management server. Log Server, LDAP Server, Web Server

B. Management server, Log server, Gateway server. Security server

C. Management server, management database, log server, automation server

D. Management server. Security Gateway. Multi-Domain Server. SmartEvent Server

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #20

What is NOT monitored as a PNOTE by ClusterXL?

A. TED

B. Policy

C. RouteD

D. VPND

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Download Free CheckPoint 156-587 Demo

Simply submit your e-mail address below to get started with our free demo of your CheckPoint 156-587 exam.