Check Point Certified Cloud Specialist (CCCS) R82 — Question 27

You have configured IPS Bypass Under Load function with additional kernel parameters: ids_tolerance_no_stress=15 and ids_tolerance_stress=15. For configuration you used the “fw ctl set” command. After reboot you noticed that these parameters returned to their default values. What do you need to do to make this configuration work immediately and stay permanent?

Answer options

• A. Set these parameters again with “fw ctl set” and edit appropriate parameters in $FWDlR/boot/modules/fwkern.conf
• B. Use script $FWDIR/bin/ IpsSetBypass.sh to set these parameters
• C. Set these parameters again with “fw ctl set’ and save configuration with “save config”
• D. Edit appropriate parameters in $FWDIR/boot/modules/fwkern.conf

Correct answer: A

Explanation

The correct answer is A because using 'fw ctl set' applies the parameters temporarily, and to ensure they persist after a reboot, they must be added to the fwkern.conf file. Option B is incorrect because the script does not set the parameters permanently. Option C is incorrect as 'save config' does not affect kernel parameters. Option D alone is insufficient since it does not apply the settings immediately.