exam questions

Exam 156-215.80 All Questions

View all questions & answers for the 156-215.80 exam

Exam 156-215.80 topic 1 question 281 discussion

Actual exam question from Checkpoint's 156-215.80
Question #: 281
Topic #: 1
[All 156-215.80 Questions]

During the Check Point Stateful Inspection Process, for packets that do not pass Firewall Kernel Inspection and are rejected by the rule definition, packets are:

  • A. Dropped without sending a negative acknowledgment
  • B. Dropped without logs and without sending a negative acknowledgment
  • C. Dropped with negative acknowledgment
  • D. Dropped with logs and without sending a negative acknowledgment
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
oluchecpoint
Highly Voted 2 years ago
For packets that do not inspection and are rejected by rule definition a negative acknowledgment (NACK) is sent (i.e RST packet on TCP and ICMP unreachable on UDP). So the answer is C, without any doubt.
upvoted 11 times
...
brauk
Highly Voted 1 year, 10 months ago
Correct is C - Dropped with negative acknowledgment
upvoted 6 times
...
abhijitlaxab
Most Recent 5 months, 2 weeks ago
Correct ans is C - Packets which do not pass kern inspection + rejected by rules = dropped with NACK
upvoted 1 times
...
Nikolas
1 year, 1 month ago
agree, answer is C schema page 247 from the CCSE R80 guide
upvoted 2 times
...
amuse311
1 year, 4 months ago
Yep, answer is C. CCSA documentation even shows that the packet is dropped and a NACK is sent.
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago