nerdexam
Check_Point

156-215.80 · Question #369

You noticed that CPU cores on the Security Gateway are usually 100% utilized and many packets were dropped. You don't have a budget to perform a hardware upgrade at this time. To optimize drops you…

The correct answer is C. fw ctl multik set_mode 9. To enable both Priority Queues and fully activate Dynamic Dispatcher on a Check Point Security Gateway, CoreXL must be set to mode 9 using the correct fw ctl multik command.

Security Gateway Troubleshooting

Question

You noticed that CPU cores on the Security Gateway are usually 100% utilized and many packets were dropped. You don't have a budget to perform a hardware upgrade at this time. To optimize drops you decide to use Priority Queues and fully enable Dynamic Dispatcher. How can you enable them?

Options

  • Afw ctl multik dynamic_dispatching on
  • Bfw ctl multik dynamic_dispatching set_mode 9
  • Cfw ctl multik set_mode 9
  • Dfw ctl miltik pq enable

How the community answered

(31 responses)
  • A
    6% (2)
  • B
    3% (1)
  • C
    81% (25)
  • D
    10% (3)

Why each option

To enable both Priority Queues and fully activate Dynamic Dispatcher on a Check Point Security Gateway, CoreXL must be set to mode 9 using the correct fw ctl multik command.

Afw ctl multik dynamic_dispatching on

'fw ctl multik dynamic_dispatching on' only toggles Dynamic Dispatcher on but does not activate Priority Queues, so it does not fully optimize packet handling the way mode 9 does.

Bfw ctl multik dynamic_dispatching set_mode 9

'fw ctl multik dynamic_dispatching set_mode 9' is not valid Check Point CLI syntax - 'dynamic_dispatching' is not a subcommand that precedes 'set_mode' in this utility.

Cfw ctl multik set_mode 9Correct

The command 'fw ctl multik set_mode 9' sets CoreXL to mode 9, which is the only mode that simultaneously enables Priority Queues and fully activates Dynamic Dispatcher, allowing the gateway to better prioritize and distribute packets across CPU cores to reduce drops under high CPU load.

Dfw ctl miltik pq enable

'fw ctl miltik pq enable' contains a typo ('miltik' instead of 'multik') and Priority Queues are not enabled via a separate 'pq enable' subcommand but through setting mode 9.

Concept tested: CoreXL mode 9 Priority Queues and Dynamic Dispatcher

Source: https://support.checkpoint.com/results/sk/sk98348

Topics

#Dynamic Dispatcher#Priority Queues#fw ctl multik#performance optimization

Community Discussion

No community discussion yet for this question.

Full 156-215.80 Practice