Exam 156-915.80 topic 1 question 16 discussion

Configuration on Security Gateway R80.10 and higher. [[email protected]:0]# fw ctl multik dynamic_dispatching on New mode is: On Please reboot the system [[email protected]:0]# https://support.checkpoint.com/results/sk/sk105261

Configuration on Security Gateway R80.10 and higher. [[email protected]:0]# fw ctl multik dynamic_dispatching on New mode is: On Please reboot the system [[email protected]:0]# https://support.checkpoint.com/results/sk/sk105261

A (from my poin of view): [Expert@mmenen-GW-1:0]# fw ctl multik set_mode 9 Usage: fw ctl multik stat fw ctl multik start fw ctl multik stop fw ctl multik utilize fw ctl multik print_heavy_conn fw ctl multik heavy_conn_analyzer fw ctl multik get_instance [command args...] fw ctl multik dynamic_dispatching [command args...] fw ctl multik prioq [command args...] fw ctl multik print_bl [command args...] fw ctl multik gconn [command args...] [Expert@mmenen-GW-1:0]# fw ctl multik dynamic_dispatching on New mode is: On Please reboot the system

All questions are wrong, since it's "ctl" and not "cti". Jokes aside. Without the typo A is the closest answer, since C would be for R77.30 only. In R80.10 and above Priority Queue is set to 'deactivated' by default and is no longer related to Dynamic Dispatcher as it was in R77.x. The Heavy Connections mechanism (Evaluator only mode) is enabled by default ("#fw ctl multik prioq" -> 1). See sk105762, VIII. for details. Thus to my understanding the command "#fw ctl multik prioq" -> 2 has to be executed as well to fully enable Priority Queue.

According to SK105261 Answer C is the right one. To fully enable the CoreXL Dynamic Dispatcher on Security Gateway: Note: In cluster environment, this procedure must be performed on all members of the cluster. Since a reboot is required, it is recommended to follow the Gaia Installation and Upgrade Guide - either "Minimal Effort" procedure, or "Zero Downtime" procedure. Run in Expert mode: [Expert@HostName]# fw ctl multik set_mode 9 Example output: [[email protected]:0]# fw ctl multik set_mode 9 Please reboot the system [[email protected]:0]# Reboot (in cluster, this might cause fail-over).

agree, answer is A

According to CCSE Manual, page 418: "To fully enable Dynamic Dispatcher on a Security Gateway, run the following command in expert mode and tgen reboot : fw ctl multik dynamic_dispatching on".

According to Check Point, the correct answer in R80.10 is none of those options: "Set the mode of the Firewall Priority Queues on Security Gateway to enabled: R80.10: [Expert@HostName]# fw ctl multik prioq Select mode 2 "On". R77.30: [Expert@HostName]# fw ctl multik set_mode 9

Correct answer A for R80 and above