Exam 156-585 All QuestionsBrowse all questions from this exam
Question 32

You have configured IPS Bypass Under Load function with additional kernel parameters: ids_tolerance_no_stress=15 and ids_tolerance_stress=15. For configuration you used the “fw ctl set” command. After reboot you noticed that these parameters returned to their default values. What do you need to do to make this configuration work immediately and stay permanent?

    Correct Answer: A

    To make the configuration work immediately and persist through reboots, you need to set the parameters using the “fw ctl set” command, which updates the values immediately. Additionally, you must edit the appropriate parameters in $FWDIR/boot/modules/fwkern.conf to ensure that these settings are applied automatically at boot time. This way, the configuration remains effective after a system restart.

Discussion
castieltelOption: A

Absolutely correct. A is the answer: To set the desired value for this kernel parameter permanently: For Gaia / SecurePlatform OS: [Expert@HostName]# touch $FWDIR/boot/modules/fwkern.conf https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk62848

SamoojOption: A

The correct answer A, for it to survive reboot

muchaOption: A

"A" is correct only if " fw ctl set -f" "-f" flag would be used. Otherwise answer 'D' is correct