Ace Your 156-115.77 CCSM Exam

Check Point Certified Security Master Questions and Answers

Question 13

What do the ‘F’ flags mean in the output of fwaccel conns?

Options:

Forward to firewall

Flag set for debug

Fast path packets

Flow established

Question 14

While troubleshooting high CPU usage on cores 3 and 4 on a cluster, you notice the following output of fwaccel stats -s:

What could be a possible cause of the high CPU usage?

Options:

Connections are being partially accelerated by SecureXL, but too many packets are still being processed by the firewall kernel.

The Secure Network Dispatcher (SND) is having to process too much inbound traffic from the NICs.

Connections are not being accelerated by SecureXL, and all packets are being forwarded to firewall kernel instances for inspection.

The Secure Network Dispatcher (SND) is working too hard to distribute the traffic to the acceleration layer.

Question 15

Certain rules will disable connection rate acceleration (templates) in the Rule Base. What command should be used to determine on what rule templates are disabled?

Options:

cpconfig

cphaprob -a if

fw ctl pstat

fwaccel stat

Question 16

Which of the following statements are TRUE about SecureXL?

I. SecureXL is able to accelerate all connections through the firewall.

II. Medium path acceleration will still cause some CPU utilization of CoreXL cores.

III. F2F connections represent “forwarded to firewall” connections that are not accelerated and fully processed through the firewall kernel.

IV. Packets going through SecureXL must be inspected by the firewall kernel before being accelerated.

Options:

II and III

I, II, and III

III and IV

I and IV

Labour Day Special - Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: top65certs

Check Point Certified Security Master Questions and Answers

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer: