cancel
Showing results for 
Search instead for 
Did you mean: 
Create a Post
Highlighted

Question about CCSA practice test

Jump to solution

Hello, Colleagues!

I just tryed to pass practice CCSA test on official site:

https://www.checkpoint.com/training/ccsa/chapter3/#

I think there is a mistake in 5th question, listed on the screen below.   Can anyone explain me, why 1st statement is incorrect?     About 4th statement, there is no option about implicit clean-up in Global Properties in R80.20.

 

WhatsApp Image 2019-07-02 at 17.40.41.jpeg

1 Solution

Accepted Solutions
Highlighted

Re: Question about CCSA practice test

Jump to solution

I'd say that the last answer (Global Properties) would be more correct under R77.30 and earlier management as implied rules of any kind (which would include the implicit cleanup rule) could only be modified through the Global Properties, but the first answer (Policy Layer) would be more correct under R80+ management due to the ability to set the action of the implicit cleanup rule per-layer that was added in R80+.

 

Book "Max Power 2020: Check Point Firewall Performance Optimization" Third Edition
Now Available at www.maxpowerfirewalls.com

View solution in original post

10 Replies
Highlighted
Pearl

Re: Question about CCSA practice test

Jump to solution
0 Kudos
Highlighted
Admin
Admin

Re: Question about CCSA practice test

Jump to solution

Agree, this looks like an incorrect answer.
Paging @shay_solomon 

 

0 Kudos
Highlighted

Re: Question about CCSA practice test

Jump to solution

I think the question and the answers are not clear😀.

Security Management R80.20 Administration Guide:

CUT>>>

Implied rules

The default rules that are available as part of the Global properties configuration and cannot be edited. You can only select the implied rules and configure their position in the Rule Base:

     - First - Applied first, before all other rules in the Rule Base - explicit or implied
     - Last - Applied last, after all other rules in the Rule Base - explicit or implied, but before the Implicit Cleanup Rule
     - Before Last - Applied before the last explicit rule in the Rule Base

Implied rules are configured to allow connections for different services that the Security Gateway uses. For example, the Accept Control Connections rules allow packets that control these services:

      - Installation of the security policy on a Security Gateway
      - Sending logs from a Security Gateway to the Security Management Server
      - Connecting to third party application servers, such as RADIUS and TACACS authentication servers

Implicit cleanup rule

The default "catch-all" rule for the Layer that deals with traffic that does not match any explicit or implied rules in the Layer. It is made automatically when you create a Layer.

Implicit cleanup rules do not show in the Rule Base.

For R80.10 later version Security Gateways, the default implicit cleanup rule action is Drop. This is because most Policies have Whitelist rules (the Accept action). If the Layer has Blacklist rules (the Drop action), you can change the action of the implicit cleanup rule to Accept in the Layer Editor.

For R77.30 or earlier versions Security Gateways, the action of the implicit rule depends on the Ordered Layer:

Drop - for the Network Layer
Accept - for a Layer with Applications and URL Filtering enabled

Note - If you change the default values, the policy installation will fail on R77.30 or earlier versions Security Gateways.

<<<CUT

PS: I had two questions in my CCSM VUE exam with commands that no longer existed.

Tags (1)
Highlighted

Re: Question about CCSA practice test

Jump to solution

I'd say that the last answer (Global Properties) would be more correct under R77.30 and earlier management as implied rules of any kind (which would include the implicit cleanup rule) could only be modified through the Global Properties, but the first answer (Policy Layer) would be more correct under R80+ management due to the ability to set the action of the implicit cleanup rule per-layer that was added in R80+.

 

Book "Max Power 2020: Check Point Firewall Performance Optimization" Third Edition
Now Available at www.maxpowerfirewalls.com

View solution in original post

Highlighted

Re: Question about CCSA practice test

Jump to solution

Thank you very much for explaination, it's clear now. So, I think, this question and 4th answer is a some kind of 77.30 legacy. But i still don't know, how should the one answer to the question like this in real exam? 🙂

0 Kudos
Highlighted

Re: Question about CCSA practice test

Jump to solution

Can't really answer your question, only @Jason_Tugwell could...

 

Book "Max Power 2020: Check Point Firewall Performance Optimization" Third Edition
Now Available at www.maxpowerfirewalls.com
0 Kudos
Highlighted
Employee+
Employee+

Re: Question about CCSA practice test

Jump to solution

For the purpose of the exam, the answer in the screen shot with the green check, is the correct answer.

This question will be one of ones that I am looking to have re-evaluated because as Heiko stated, it is not exactly clear, IMO.

Thanks,

Tug

 

Highlighted
Admin
Admin

Re: Question about CCSA practice test

Jump to solution
That doesn't even seem right for R77.x though, as all you can really modify in Global Properties is whether or not to log the implicit rules.
0 Kudos
Highlighted

Re: Question about CCSA practice test

Jump to solution

Agreed Dameon, hence my use of the term "most correct" or its corollary "choose the BEST answer" as I believe it is stated on the exam.  🙂

 

Book "Max Power 2020: Check Point Firewall Performance Optimization" Third Edition
Now Available at www.maxpowerfirewalls.com
0 Kudos
Highlighted

Re: Question about CCSA practice test

Jump to solution

Hi guys,

I agree with Dameon's and Timothy's answer.

I think the question and answer is not good for a learner. 

I'd make the answer clear😀.

 

Tags (1)