Check Point Certified Security Administrator (CCSA) R80 — Question 129

If the first packet of an UDP session is rejected by a security policy, what does the firewall send to the client?

Answer options

• A. Nothing
• B. TCP FIN
• C. TCP RST
• D. ICMP unreachable

Correct answer: A

Explanation

The correct answer is A because when a UDP packet is dropped by a firewall, it does not send any response back to the sender. Options B and C refer to TCP-specific behaviors which are not applicable in the context of UDP, while option D is related to ICMP messages, which are not sent for blocked UDP packets.