Check Point Certified Security Expert (CCSE) R80 — Question 133

To accelerate the rate of connection establishment, SecureXL groups all connection that match a particular service and whose sole differentiating element is the source port. The type of grouping enables even the very first packets of a TCP handshake to be accelerated. The first packets of the first connection on the same service will be forwarded to the Firewall kernel which will then create a template of the connection. Which of the these is NOT a SecureXL template?

Answer options

• A. Accept Template
• B. Deny Template
• C. Drop Template
• D. NAT Template

Correct answer: B

Explanation

The correct answer is B, as a Deny Template is not a recognized type in SecureXL's categorization of templates. Accept, Drop, and NAT Templates are all valid types that serve specific purposes in connection handling.