156-315.77 · Question #752
When you use the Global Properties' default settings on R77, which type of traffic will be dropped if NO explicit rule allows the traffic?
The correct answer is B. RIP traffic. Exam Questions, Study Guides, Practice Tests. Lead the way to help you pass any IT Certification exams, 100% Pass Guaranteed or Full Refund. Especially Cisco, CompTIA, Citrix, EMC, HP, Oracle, VMware, Juniper, Check Point, LPI, Nortel, EXIN and so on. Our Slogan: First Test…
Question
When you use the Global Properties' default settings on R77, which type of traffic will be dropped if NO explicit rule allows the traffic?
Options
- AFirewall logging and ICA key-exchange information
- BRIP traffic
- COutgoing traffic originating from the Security Gateway
- DSmartUpdate connections
How the community answered
(48 responses)- A4% (2)
- B71% (34)
- C17% (8)
- D8% (4)
Explanation
Exam Questions, Study Guides, Practice Tests. Lead the way to help you pass any IT Certification exams, 100% Pass Guaranteed or Full Refund. Especially Cisco, CompTIA, Citrix, EMC, HP, Oracle, VMware, Juniper, Check Point, LPI, Nortel, EXIN and so on. Our Slogan: First Test, First Pass. Help you to pass any IT Certification exams at the first try. You can reach us at any of the email addresses listed below. Any problems about IT certification or our products, you could rely upon us, we will give you satisfactory answers in 24 hours.
Topics
Community Discussion
5
Samuel O.May 22, 2026The correct answer is B, RIP traffic. In R77, the Global Properties implicit rules are pre-configured to allow a handful of essential control-plane flows by default, things like firewall control connections, ICA key exchange, SmartUpdate, and outgoing packets sourced from the gateway itself. RIP is the outlier here because that Accept checkbox in Global Properties defaults to unchecked, meaning the policy engine never sees an implicit permit for it and drops it at the kernel level before your rulebase even gets a look. I actually ran into this on a client site years back where a branch router was running RIP for legacy reasons and traffic was silently disappearing until we traced it back to that unchecked box. The takeaway for the exam is to memorize which items Check Point implicitly allows by default versus which ones require you to either enable the checkbox in Global Properties or write an explicit rule, and RIP is the classic example of the latter.
Fatima Z.May 12, 2026RIP gets dropped by default, but why do you think ICA traffic stays safe?
Samuel O.May 12, 2026ICA traffic rides inside an IPsec tunnel to the head-end, so even though RIP adjacencies get torn down on a split-tunnel setup, the encrypted ICA stream is protected by the IKE SA and never touches the untrusted segment in cleartext.
Bahar F.May 27, 2026The answer is B, RIP traffic. Global Properties in R77 ships with a set of implied rules that silently permit control-plane and management traffic, so things like ICA key exchange, SmartUpdate sessions, and outbound gateway-originated connections all get an invisible pass without you writing a single explicit rule. RIP sits outside that protected club because Check Point treats dynamic routing traffic as something you opt into deliberately, not something the firewall assumes you need, so no explicit rule means the packet hits the cleanup drop. When I sat the exam I actually second-guessed myself on this one because the distractor about outgoing gateway traffic sounds plausible until you remember that implied rules in Global Properties specifically cover gateway-originated connections under the "Accept outgoing packets originating from Gateway" checkbox, which is on by default, so C was never the right pick.
Samuel O.May 27, 2026The "Accept outgoing packets originating from Gateway" checkbox tripped me up too until I realized it only covers the gateway's own management and control traffic, not general routed traffic, so RIP hello packets and updates still fall through unless you create an explicit rule or toggle the specific Accept RIP checkbox that lives right there in Global Properties alongside those other implied rule settings.