Check Point Certified Security Expert (CCSE) R80 — Question 92

If an administrator wants to add manual NAT for addresses now owned by the Check Point firewall, what else is necessary to be completed for it to function properly?

Answer options

• A. Nothing - the proxy ARP is automatically handled in the R80 version
• B. Add the proxy ARP configurations in a file called /etc/conf/local.arp
• C. Add the proxy ARP configurations in a file called $FWDIR/conf/local.arp
• D. Add the proxy ARP configurations in a file called $CPDIR/conf/local.arp

Correct answer: C

Explanation

The correct option is C because the proxy ARP configurations must be placed in the $FWDIR/conf/local.arp file for the Check Point firewall to recognize the NAT settings. Options A and B are incorrect as they either suggest no action is needed or refer to the wrong file path, and option D refers to the $CPDIR directory, which is not the correct location for proxy ARP settings.