Examice

Exam 156-31581 All QuestionsBrowse all questions from this exam

Question 263

Which of the following statements about SecureXL NAT Templates is true?

NAT Templates are generated to achieve high session rate for NAT. These templates store the NAT attributes of connections matched by rulebase so that similar new connections can take advantage of this information and do NAT without the expensive rulebase lookup. These are enabled by default and work only if Accept Templates are enabled.

DROP Templates are generated to achieve high session rate for NAT. These templates store the NAT attributes of connections matched by rulebase so that similar new connections can take advantage of this information and do NAT without the expensive rulebase lookup. These are disabled by default and work only if NAT Templates are disabled.

NAT Templates are generated to achieve high session rate for NAT. These templates store the NAT attributes of connections matched by rulebase so that similar new connections can take advantage of this information and do NAT without the expensive rulebase lookup. These are disabled by default and work only if Accept Templates are disabled.

ACCEPT Templates are generated to achieve high session rate for NAT. These templates store the NAT attributes of connections matched by rulebase so that similar new connections can take advantage of this information and do NAT without the expensive rulebase lookup. These are disabled by default and work only if NAT Templates are disabled.

Correct Answer: C

NAT Templates are generated to achieve high session rate for NAT. These templates store the NAT attributes of connections matched by rulebase so that similar new connections can take advantage of this information and do NAT without the expensive rulebase lookup. These are disabled by default and work only if Accept Templates are disabled.

Discussion

reinhardtvdwOption: A

In the R81 exam context, nat templates are enabled by default and disabled by default in a R80 context.

KeerberusOption: A

CCSE Page 325 “NAT Templates - Generated to achieve high session rate for NAT. These templates store the NAT attributes of connections matched by rule base so that similar new connections can take advantage of this information and do NAT without the expensive rule base lookup. These are enabled by default and work only if Accept Templates are enabled”

timmitch1987Option: A

NAT Templates- Enabled by default and work only if Accept Templates is enabled. CCSE Guide

c0be09eOption: A

NAT templates are enabled by default from at least R80.40. CCSE R80.40 manual page 242.

AraminskiOption: A

Correct, asnwer "A"

pm0565Option: C

NAT templates are not enabled by default. I will go with C.

ObzuOption: A

sing SecureXL Templates for NAT traffic is critical to achieve high session rate for NAT. SecureXL Templates are supported for Static NAT and Hide NAT using the existing SecureXL Templates mechanism. SecureXL NAT Templates are supported in cluster in High Availability / VRRP, and Load Sharing modes. SecureXL Templates are supported by VSX Virtual Systems. SecureXL NAT Templates feature in SecureXL is disabled by default on Check Point Security Gateway R80.10 and below. All template handling in versions R80.20 and above has moved to the Firewall, and is not relevant to SecureXL . SecureXL implements NAT Templates only once these templates are offloaded by FireWall kernel.

McBeanoOption: C

I would say C, as they're disabled by default. However this is seemingly a legacy question, as after R80.20 template handling happens on the firewall, not relevant to SecureXL - likely won't see this question on an R81 exam. "SecureXL NAT Templates feature in SecureXL is disabled by default on Check Point Security Gateway R80.10 and below. All template handling in versions R80.20 and above has moved to the Firewall, and is not relevant to SecureXL ." https://support.checkpoint.com/results/sk/sk71200