Free Access CheckPoint.156-215.80.v2022-02-26.q127 Practice Test (Page 19)

Question 86

CPU-level of your Security gateway is peaking to 100% causing problems with traffic. You suspect that the problem might be the Threat Prevention settings.
The following Threat Prevention Profile has been created.

How could you tune the profile in order to lower the CPU load still maintaining security at good level?

A.The problem is not with the Threat Prevention Profile. Consider adding more memory to the appliance.

B.Set High Confidence to Low and Low Confidence to Inactive.

C.Set the Performance Impact to Very Low Confidence to Prevent.

D.Set the Performance Impact to Medium or lower.

Question 87

In what way is Secure Network Distributor (SND) a relevant feature of the Security Gateway?

A.SND is a feature to accelerate multiple SSL VPN connections

B.SND is an alternative to IPSec Main Mode, using only 3 packets

C.SND is used to distribute packets among Firewall instances

D.SND is a feature of fw monitor to capture accelerated packets

Question 88

On the following graphic, you will find layers of policies.

What is a precedence of traffic inspection for the defined polices?

A.A packet arrives at the gateway, it is checked against the rules in the networks policy layer and then if implicit Drop Rule drops the packet, it comes next to IPS layer and then after accepting the packet it passes to Threat Prevention layer.

B.A packet arrives at the gateway, it is checked against the rules in the networks policy layer and then if there is any rule which accepts the packet, it comes next to IPS layer and then after accepting the packet it passes to Threat Prevention layer

C.A packet arrives at the gateway, it is checked against the rules in the networks policy layer and then if there is any rule which accepts the packet, it comes next to Threat Prevention layer and then after accepting the packet it passes to IPS layer.

D.A packet arrives at the gateway, it is checked against the rules in IPS policy layer and then it comes next to the Network policy layer and then after accepting the packet it passes to Threat Prevention layer.