Exam 156-315.80 topic 1 question 144 discussion

Actual exam question from Checkpoint's 156-315.80

Question #: 144
Topic #: 1

To accelerate the rate of connection establishment, SecureXL groups all connection that match a particular service and whose sole differentiating element is the source port. The type of grouping enables even the very first packets of a TCP handshake to be accelerated. The first packets of the first connection on the same service will be forwarded to the Firewall kernel which will then create a template of the connection. Which of the these is NOT a SecureXL template?

A. Accept Template
B. Deny Template
C. Drop Template
D. NAT Template

Show Suggested Answer

Suggested Answer: B 🗳️

by Nikolas at Dec. 3, 2020, 11:52 p.m.

Comments

Submit Cancel

henkpoa

10 months, 2 weeks ago

Selected Answer: B

B. Can easily be verified via fwaccel stat command Accept Templates : enabled Drop Templates : disabled NAT Templates : enabled

upvoted 3 times

...

Amathai1803

11 months, 2 weeks ago

Had this question today in exam.

upvoted 1 times

...

lordlich

1 year ago

Deny Template

upvoted 1 times

...

Nikolas

2 years, 2 months ago

SecureXL has three different templates: • Accept Templates — Created when a connection is established by matching a new connection to a particular set of tuple attributes. Subsequent connections are established without performing a rule match and are therefore accelerated. Accept templates are enabled by default and generated from active connections according to policy rules. Accept template acceleration is only on connections with the same destination port. • Drop Templates — Generated by policy rules to accelerate the speed at which a connection is dropped by matching a new connection to a set of tuple attributes. Subsequent connections are dropped without performing a rule match and are therefore accelerated. Drop template acceleration is also performed only on connections with the same destination port. These templates are disabled by default. Drop templates are discussed in greater detail in the CCSM course. • NAT Templates — Generated to achieve high session rate for NAT. These templates are supported in cluster HA/VRRP and Load Sharing modes. NAT templates are controlled by global kernel parameters and disabled by default. NAT templates are discussed in greater detail in the CCSM course.

upvoted 2 times

...