During the Check Point Stateful Inspection Process, for packets that do not pass Firewall Kernel Inspection and are rejected by the rule definition, packets are:
A.
Dropped without sending a negative acknowledgment
B.
Dropped without logs and without sending a negative acknowledgment
C.
Dropped with negative acknowledgment
D.
Dropped with logs and without sending a negative acknowledgment
For packets that do not inspection and are rejected by rule definition a negative acknowledgment (NACK) is sent (i.e RST packet on TCP and ICMP unreachable on UDP).
So the answer is C, without any doubt.
Yep, answer is C. CCSA documentation even shows that the packet is dropped and a NACK is sent.
upvoted 1 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
oluchecpoint
Highly Voted 2 years agobrauk
Highly Voted 1 year, 10 months agoabhijitlaxab
Most Recent 5 months, 2 weeks agoNikolas
1 year, 1 month agoamuse311
1 year, 4 months ago