The correct answer is:
A. INSPECT Engine
The INSPECT Engine is responsible for extracting detailed information from packets and storing that information in state tables in Check Point's architecture. It is a key component of the Stateful Inspection process. Stateful Inspection (option B) is a broader concept that involves tracking the state of active connections, while INSPECT specifically deals with examining and processing the contents of packets.
According to Checkpoint, the Answer is A tough I must admit that B seems to be more accurate due to the fact that Stateful Inspection is a Technology, unlike Inspect Engine which is more as a solution rather than a technology.
A
Check Point FireWall-1’s Stateful Inspection overcomes the limitations of the previous two approaches
by providing full application-layer awareness without
breaking the client/server model. With Stateful
Inspection, the packet is intercepted at the network
layer, but then the INSPECT Engine takes over. It
extracts state-related information required for the
security decision from all application layers and
maintains this information in dynamic state tables
for evaluating subsequent connection attempts. This
provides a solution which is highly secure and offers
maximum performance, scalability, and extensibility.
B is correct, because Stateful Inspection is the technology
https://www.checkpoint.com/downloads/product-related/whitepapers/stateful-inspection-technology.pdf
A is correct, INSPECT Engine is used to extract state related information from the packet and store that information in state tables.
This information is from CCSA offical guide.
With Stateful Inspection, the packet is intercepted at the network layer, but then the INSPECT Engine takes over. It extracts state-related information required for the security decision from
all application layers and maintains this information in dynamic state tables for evaluating subsequent connection attempts. This provides a solution which is highly secure and offers maximum performance, scalability, and extensibility.
-> A is correct
upvoted 2 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
oluchecpoint
Highly Voted 4 years, 11 months agoTDiBoy
Highly Voted 5 years agodrogadotcom
3 years, 4 months agoRPM99
Most Recent 9 months, 2 weeks agoCycy_mia
1 year, 6 months agonur16
2 years, 2 months agoPrototype_01
2 years, 6 months agodys
3 years agoDUGDUGDUG
3 years, 4 months agoboku
3 years, 4 months agodml90
3 years, 4 months agorafaelrodroliveira1988
3 years, 6 months agodjreymix
3 years, 8 months agoDS007
3 years, 9 months agoAychi
4 years, 3 months agoAngel123
4 years, 4 months agoAngel123
4 years, 4 months agoMia12
4 years, 5 months ago