During the Check Point Stateful Inspection Process, for packets that do not pass Firewall Kernel Inspection and are rejected by the rule definition, packets are:
A.
Dropped without sending a negative acknowledgment
B.
Dropped without logs and without sending a negative acknowledgment
C.
Dropped with negative acknowledgment
D.
Dropped with logs and without sending a negative acknowledgment
Answer C.
CCSE manual, page 247: "For packets that do not pass inspection and are rejected by the rule definition, a negative acknowledgment (NACK) is sent (i.e. RST packet on TCP and ICMP unreachable on UDP)."
For packets that do not pass inspection and are rejected by the rule definition, a negative ack (NACK) is sent. Eje: RST packet on tcp and icmp unreacheble on UDP) .Answer C
Tricky, if the context of the question is rejecting a paket by rule definition, the reject action implies an acknowledgment response. A drop action implies a block without aknowledgement. So the answer Dropped with negative acknowledgment contradicts itself from my perspective.
upvoted 2 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
dkx0stv
Highly Voted 2 years, 1 month agorahav
2 years agobobby14
1 year, 11 months agoRCL_NAME
Most Recent 3 months, 1 week agoAmathai1803
4 months, 3 weeks agolordlich
5 months, 3 weeks agoCC_prep1
10 months, 3 weeks agoBerzerk
1 year, 10 months ago