During the Check Point Stateful Inspection Process, for packets that do not pass Firewall Kernel Inspection and are rejected by the rule definition, packets are:
A.
Dropped without sending a negative acknowledgment
B.
Dropped without logs and without sending a negative acknowledgment
C.
Dropped with negative acknowledgment
D.
Dropped with logs and without sending a negative acknowledgment
Answer C.
CCSE manual, page 247: "For packets that do not pass inspection and are rejected by the rule definition, a negative acknowledgment (NACK) is sent (i.e. RST packet on TCP and ICMP unreachable on UDP)."
For packets that do not pass inspection and are rejected by the rule definition, a negative ack (NACK) is sent. Eje: RST packet on tcp and icmp unreacheble on UDP) .Answer C
Tricky, if the context of the question is rejecting a paket by rule definition, the reject action implies an acknowledgment response. A drop action implies a block without aknowledgement. So the answer Dropped with negative acknowledgment contradicts itself from my perspective.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
dkx0stv
Highly Voted 2 years, 8 months agorahav
2 years, 6 months agobobby14
2 years, 6 months agoRCL_NAME
Most Recent 9 months, 4 weeks agoAmathai1803
11 months, 2 weeks agolordlich
1 year agoCC_prep1
1 year, 5 months agoBerzerk
2 years, 5 months ago