Check Point Certified Cloud Specialist (CCCS) R82 — Question 4

The customer is using Check Point appliances that were configured long ago by third-party administrators. Current policy includes different enabled IPS protections and Bypass Under Load function. Bypass Under Load is configured to disable IPS inspections of CPU and Memory usage is higher than 80%. The Customer reports that IPS protections are not working at all regardless of CPU and Memory usage. What is the possible reason of such behavior?

Answer options

• A. The kernel parameter ids_assume_stress is set to 0
• B. The kernel parameter ids_assume_stress is set to 1
• C. The kernel parameter ids_tolerance_no_stress is set to 10
• D. The kernel parameter ids_tolerance_stress is set to 10

Correct answer: B

Explanation

The correct answer is B because setting the kernel parameter ids_assume_stress to 1 indicates that the system is under stress, which can cause the IPS protections to be disabled entirely. Options A, C, and D do not directly affect the overall status of IPS protections in the same way and therefore do not explain the reported issue.