Exam 156-315.80 topic 1 question 100 discussion

Actual exam question from Checkpoint's 156-315.80

Question #: 100
Topic #: 1

[All 156-315.80 Questions]

SecureXL improves non-encrypted firewall traffic throughput and encrypted VPN traffic throughput.

A. This statement is true because SecureXL does improve all traffic.
B. This statement is false because SecureXL does not improve this traffic but CoreXL does.
C. This statement is true because SecureXL does improve this traffic.
D. This statement is false because encrypted traffic cannot be inspected.

Show Suggested Answer

Suggested Answer: C 🗳️
SecureXL improved non-encrypted firewall traffic throughput, and encrypted VPN traffic throughput, by nearly an order-of-magnitude- particularly for small packets flowing in long duration connections.
Reference:
https://downloads.checkpoint.com/fileserver/SOURCE/direct/ID/10001/FILE/SecureXL_and_Nokia_IPSO_White_Paper_20080401.pdf

by NoHombre at Aug. 12, 2020, 5:51 p.m.

Comments

Submit Cancel

henkpoa

10 months, 2 weeks ago

Selected Answer: C

C Should be correct. I was in a situation where I had a "heavy flow" between an ESXi-server and VEEAM backup-server remotely. I saw that this was purely management traffic, and saw that the traffic was heavily impacting one of the CPUs as an elephant flow. When disabling URLF & appl for the flow, it all got accelerated, making a flow that took 100 % CPU load down to nothing.

upvoted 1 times

...

NoHombre

2 years, 5 months ago

"SecureXL improves non-encrypted Firewall traffic throughput and encrypted (VPN) traffic throughput by a significant amount, particularly for small packets flowing in long duration connections." CCSE Study Guide p.399

upvoted 4 times

...