CCSM 156-115.77 Checkpoint Study Notes

Check Point Certified Security Master Questions and Answers

Question 37

The command that lists the firewall kernel modules on a Security Gateway is:

fw list kernel modules

fw ctl kernel chain

fw ctl debug -m

fw list modules

Question 38

What does the IP Options Strip represent under the fw chain output?

IP Options Strip is not a valid fw chain output.

The IP Options Strip removes the IP header of the packet prior to be passed to the other kernel functions.

The IP Options Strip copies the header details to forward the details for further IPS inspections.

IP Options Strip is only used when VPN is involved.

Question 39

The command fw monitor -p all displays what type of information?

It captures all points of the chain as the packet goes through the firewall kernel.

This is not a valid command.

The -p is used to resolve MAC address in the firewall capture.

It does a firewall monitor capture on all interfaces.

Question 40

Compare these two images to establish which blade/feature was disabled on the firewall.

IPS

VPN

NAT

L2TP