ExamGecko
Question list
Search
Search

Question 419 - 156-315.81 discussion

Report
Export

Within the Check Point Firewall Kernel resides Chain Modules, which are individually responsible for the inspection of a specific blade or feature that has been enabled in the configuration of the gateway. For Wire mode configuration, chain modules marked with _______ will not apply.

A.
ffffffff
Answers
A.
ffffffff
B.
00000001
Answers
B.
00000001
C.
00000002
Answers
C.
00000002
D.
00000003
Answers
D.
00000003
Suggested answer: B

Explanation:

For Wire mode configuration, chain modules marked with 00000001 will not apply. Wire mode is a special configuration that allows a Security Gateway to pass traffic without inspection, acting as a bridge between two network segments. In Wire mode, only chain modules that are essential for basic functionality are applied, such as VPN, QoS, ClusterXL, and SecureXL. Chain modules that are related to inspection-based Software Blades, such as Firewall, IPS, Application Control, and so on, are skipped. The chain modules that are skipped are marked with 00000001 in the output of fw ctl chain command.

Reference:Wire Mode

asked 16/09/2024
Kofi Amedorme
44 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first