ExamGecko
Question list
Search
Search

Question 595 - 156-315.81 discussion

Report
Export

In CoreXL, the Firewall kernel is replicated multiple times. Each replicated copy or instance can perform the following:

A.
The Firewall kernel only touches the packet if the connection is accelerated
Answers
A.
The Firewall kernel only touches the packet if the connection is accelerated
B.
The Firewall kernel is replicated only with new connections and deletes itself once the connection times out
Answers
B.
The Firewall kernel is replicated only with new connections and deletes itself once the connection times out
C.
The Firewall can run the same policy on all cores
Answers
C.
The Firewall can run the same policy on all cores
D.
The Firewall can run different policies per core
Answers
D.
The Firewall can run different policies per core
Suggested answer: C

Explanation:

CoreXL is a performance-enhancing technology that enables the Security Gateway to utilize multiple CPU cores for processing traffic. CoreXL creates multiple instances of the Firewall kernel, each running on a separate CPU core. Each Firewall instance can handle traffic concurrently and independently, applying the same security policy to the packets that are assigned to it. CoreXL does not allow different policies per core, as this would create inconsistency and complexity in the security enforcement.

The references are:

Best Practices - Security Gateway Performance

Check Point Certified Security Expert R81.20 (CCSE) Core Training, slide 16

Check Point R81 Quantum Security Gateway Guide, page 42

asked 16/09/2024
Elyse Martinez
37 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first