Check Point Certified Cloud Specialist (CCCS) R82 — Question 58

For TCP connections, when a packet arrives at the Firewall Kernel out of sequence or fragmented, which layer of IPS corrects this to allow for proper inspection?

Answer options

• A. Passive Streaming Library
• B. Protections
• C. Protocol Parsers
• D. Context Management

Correct answer: A

Explanation

The Passive Streaming Library is responsible for reordering and reconstructing TCP packets that may arrive fragmented or out of sequence, ensuring that the data can be inspected properly. The other options, while important in their own right, do not handle packet reassembly or ordering, which is critical for accurate analysis.