nerdexam
Check_Point

156-115.80 · Question #107

Your customer receives an alert from their network operation center, they are seeing ARP and Ping scans of their network originating from the firewall. What could be the reason for the behaviour?

The correct answer is C. One or both of the firewalls in a cluster have stopped receiving CCP packets on an interface. Explanation/Reference:

Troubleshooting and Optimization

Question

Your customer receives an alert from their network operation center, they are seeing ARP and Ping scans of their network originating from the firewall. What could be the reason for the behaviour?

Options

  • ACheck Point firewalls probe adjacent networking devices during normal operation.
  • BIPS is disabled on the firewalls and there is a known OpenSSL vulnerability that allows a hacker to
  • COne or both of the firewalls in a cluster have stopped receiving CCP packets on an interface.
  • DCheck Point's Antibot blade performs anti-bot scans of the surrounding network.

How the community answered

(31 responses)
  • A
    16% (5)
  • B
    3% (1)
  • C
    74% (23)
  • D
    6% (2)

Explanation

Explanation/Reference:

Topics

#CCP packets#ClusterXL#ARP scanning#cluster health

Community Discussion

No community discussion yet for this question.

Full 156-115.80 Practice