B is correct

Answer is B! The traffic is allowed according to the rule base and "checked for viruses". One of the Factor that packet is not accelerated is connection that requires Security Server (Antivirus, Authentication etc.). The scenario mentioned that traffic is checked for possible virus. Option D, might be possible but, statement did not mention the specific log information that traffic where it came from. Most traffic originate or destined to the Security gateway are matched to the implied rule. Implied does not need to run any Security Blades. Let me know your thoughts.

Another strange question. Because options B and D are correct.

So it could B or D but ask for most likely so prefer D

From CCSE R80.10 Manual, Page 400: There are several factors that preclude a packet from being accelerated, such as: - The ClusterXL Sticky Decision Function (SDF) feature is enabled - The first packet of any new TCP or UDP session, unless a template exists - Connections destined to or originating from the Security Gateway - Connections that require Security servers (Authentication, Antivirus, URL Filtering, Anti- Spam, DNS prot ocol enforcement) - Connections that have a Handler (ICMP, FTP, H.323, etc.) - Some IPS features (IP, ID, TTL) • Multicast packets

traffic is not accelerated,-Answer The traffic is originating from the gateway itself

B is correct. Listed below. Because the traffic was checked by an Antivirus, it must have gone through a security server. There are several factors that preclude (prevent) a packet from being accelerated, such as: .... • Connections destined to or originating from the Security Gateway • Connections that require Security servers (Authentication, Antivirus, URL Filtering, Anti-Spam, DNS protocol enforcement) ... etc. From CCSE R80.10 Manual, Page 400

I would say B since it needs the AV engine to check, anybody confirms?