Exam 156-315.80 All QuestionsBrowse all questions from this exam
Question 210

What is the Implicit Clean-up Rule?

    Correct Answer: B

    The Implicit Clean-up Rule refers to a setting that is configured per Policy Layer. It is the default 'catch-all' rule for the Layer that deals with traffic that does not match any explicit or implied rules in the Layer. This rule can be defined under each policy's properties.

Discussion
KarrolOption: A

A is correct. According to official Check Point CCSA practice exam, question 5 on this page: https://www.checkpoint.com/training/ccsa/chapter3/

SirSheik

Negative, this specific option does not exist in Global Properties.

certcert1Option: B

B is correct. Edit policy layar > Advance, you will see the option. Global properties have no such option.

ShabVj

Correct , B is the answer , each layer has it's own implicit rule.

GoseuOption: A

A according to CCSA chapter 3 q5

pojkofd00m

There's no trace of cleanup rule configuration in global properties. The CCSA chapter 3 q 5 does indeed says so but it's a mistake for sure. Open global properties and check it yourself!

SirSheik

Negative, this specific option does not exist in Global Properties.

essie007Option: B

B: https://sc1.checkpoint.com/documents/R80.30/SmartConsole_OLH/EN/html_frameset.htm?topic=MB_aKI6UquDmK82Th-kIOw2

DrTee

Implicit cleanup in R80, is defined per policy. Right click to edit policies, advanced and you can set it to deny or accept. Answer B

Karrol

A is correct, according to official Check Point CCSA practice test. See question 5. https://www.checkpoint.com/training/ccsa/chapter3/

SirSheik

Negative, this specific option does not exist in Global Properties.

BerzerkOption: B

For those who consider A as correct answer, in Global Properties can configure several implicit rules (Accept control connections, Accept RIP, Accept ICMP, etc), but not the implicit cleanup rule, so A can not be correct)

SnirOption: A

Answer is A!!!!

SirSheik

Negative, this specific option does not exist in Global Properties.

ChinkSantanaOption: B

B: Implicit Clean-up Rules: The default catch-all rule for the Layer that deals with traffic that does not match any explicit or implied rules in the Layer. It is created automatically when you create a Layer. Implicit clean-up rules do not show in the Rule Base.

voorvdabOption: C

I think C https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm?topic=documents/R80/CP_R80_SecMGMT/126197

Shan_NetSecOption: B

guys B is the right answer. Implicit Cleanup rule action can be defined in each policy package Policy management -> click the policy package -> access control > edit > advanced

KrytenOption: B

Implied rules are global, Implicit rules are per Policy. So its B

FriedExamsOption: B

It's B! You can configure the implicit action on each policy layer you create. The "default" i.e., already configured ones have it defined already , but if you create a new policy layer, you will always need to NOT forget to configure it

AngelitoOption: A

I think is A

Kurp

Correct Answer is B. Implicit clean up rule is defined under the policy's properties

Karrol

Not according to the official Check Point CCSA practice test. Answer is A. https://www.checkpoint.com/training/ccsa/chapter3/

SirSheik

Negative, this specific option does not exist in Global Properties.

mando1644Option: B

B is the correct answer, implicit rules are per policy layers, default is drop for network and accept for application policy layer

dml90Option: B

It is B: "Implicit cleanup rule The default "catch-all" rule that deals with traffic that does not match any explicit or implied rules in the Policy Layers. For R77.30 or earlier versions Security Gateways, the action of the implicit rule depends on the Policy Layer: Drop - for the Network Layer Accept - for the Application Control Layer Note - If you change the default values, the policy installation will fail. The implicit rules do not show in the Rule Base." source: https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm?topic=documents/R80/CP_R80_SecMGMT/126197

lordlichOption: C

C is correct