156-587Updated 8d ago · Aug 28, 2026
156-587: Check Point Certified Troubleshooting Expert - R81.20
84 questions across 1 topics, with suggested answers, explanations where available, and imported community discussion. The first 8 questions are free to preview.
Topics
| # | Topic | Questions | Free |
|---|---|---|---|
| 1 | Troubleshooting Identity Awareness | 11 | 8 |
Preview
8 of 11 accessibleQuestion 1 · Troubleshooting Identity Awareness Open
Which command would you run to verify communication between the Security Gateway and the Identity Collector?
Answer: B
The `pdp connections idc` command displays the connections between the Policy Decision Point (PDP) on the Security Gateway and Identity Collectors, allowing their communication status to be verified.
Question 2 · Troubleshooting Identity Awareness Open
In Identity Awareness, what is the PDP process?
Answer: A
The PDP (Policy Decision Point) is the Identity Awareness component that collects identities from identity sources and shares them with other gateways or Policy Enforcement Points for identity-based policy enforcement. [Check Point Identity Awareness Commands](https://sc1.checkpoint.com/documents/R82.10/WebAdminGuides/EN/CP_R82.10_CLI_ReferenceGuide/Content/Topics-CLIG/IDAG/Identity-Awareness-Commands.htm)
**Learn more:** [Check Point Identity Awareness Commands](https://sc1.checkpoint.com/documents/R82.10/WebAdminGuides/EN/CP_R82.10_CLI_ReferenceGuide/Content/Topics-CLIG/IDAG/Identity-Awareness-Commands.htm)
Question 3 · Troubleshooting Site-to-Site VPNs Open
Which command or commands will disable all VPN debug collection?
Answer: D
VPN debug collection can include both VPN daemon and IKE debugging. `vpn debug off` disables VPN daemon debugging, and `vpn debug ikeoff` disables IKE debugging; using both commands stops all VPN debug collection.
**Learn more:** [Check Point troubleshooting and debugging guide](https://sc1.checkpoint.com/uc/htmls/SstTroubleshooting_and_Debugging.pdf)