nerdexam
Check_Point

156-115.80 · Question #148

You suspect that IPS protections may be dropping legitimate traffic by mistake. To reduce the false positives, what GuiDBedit parameter could you enable to work with fw ctl zdebug drop to generate a…

The correct answer is C. enable_inspect_debug_compilation. See the full explanation below for the reasoning.

Question

You suspect that IPS protections may be dropping legitimate traffic by mistake. To reduce the false positives, what GuiDBedit parameter could you enable to work with fw ctl zdebug drop to generate a more elaborate drop message for these packets?

Options

  • Aenable_inspect_debug_ips_compilation
  • Binspect_ips_debug_inspection
  • Cenable_inspect_debug_compilation
  • Denable_inspect_debug_ips

How the community answered

(21 responses)
  • A
    10% (2)
  • B
    5% (1)
  • C
    81% (17)
  • D
    5% (1)

Community Discussion

No community discussion yet for this question.

Full 156-115.80 Practice