exam questions

Exam 156-315.80 All Questions

View all questions & answers for the 156-315.80 exam

Exam 156-315.80 topic 1 question 41 discussion

Actual exam question from Checkpoint's 156-315.80
Question #: 41
Topic #: 1
[All 156-315.80 Questions]

What happen when IPS profile is set in Detect Only Mode for troubleshooting?

  • A. It will generate Geo-Protection traffic
  • B. Automatically uploads debugging logs to Check Point Support Center
  • C. It will not block malicious traffic
  • D. Bypass licenses requirement for Geo-Protection control
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️
It is recommended to enable Detect-Only for Troubleshooting on the profile during the initial installation of IPS. This option overrides any protections that are set to
Prevent so that they will not block any traffic.
During this time you can analyze the alerts that IPS generates to see how IPS will handle network traffic, while avoiding any impact on the flow of traffic.
Reference:
https://sc1.checkpoint.com/documents/R76/CP_R76_IPS_AdminGuide/12750.htm

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Nikolas
Highly Voted 1 year, 7 months ago
page 548 of CCSE R80 guide: If a specific IPS profile is in Detect Only Mode for troubleshooting, it will not block malicious traffic. so answer is C, correct
upvoted 7 times
...
Amathai1803
Most Recent 5 months ago
Had this question today in exam.
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago