CCTA flashcards
CCTA · Build recall with a focused review session.
25 cards. Read the term and the definition here. The deck at the top of this page is optional.
- Flow tuple
- The source and destination addresses, transport ports, and protocol used to distinguish a specific network exchange and its direction.
- Bounded diagnostic
- A collection scoped to the relevant system, flow, duration, output size, and stop condition to limit operational impact and exposure.
- Capture filter
- A selection expression matching traffic visible at a chosen observation point, which must account for direction, translation, and encapsulation.
- Snapshot length
- The portion of each packet retained by a capture, which can limit available payload even when the original packet was larger.
- CPInfo
- A Check Point diagnostic collection tool used to gather system information for analysis or support under an appropriate authorized procedure.
- Longest-prefix match
- Ordinary destination-route selection favoring the matching route with the most specific prefix, subject to the actual forwarding context and design.
- Network address translation
- Modification of relevant packet addresses or ports according to configured behavior, requiring correlation of original and translated observations during troubleshooting.
- Anti-spoofing
- A protection comparing source traffic with expected interface topology, requiring accurate network and path assumptions rather than a global diagnostic bypass.
- Stateful inspection
- Enforcement that considers connection state, making the actual initial and return paths relevant when different devices or members process the traffic.
- Path MTU
- The packet-size constraint along a path, whose interaction with encapsulation and feedback can affect larger transfers despite successful small probes.
- Secure Internal Communication
- Authenticated trust between relevant Check Point components, dependent on the actual identities, credentials, connectivity, certificate state, and time conditions.
- Published session
- Management changes made available through the session publication workflow, distinct from proof that the intended gateway has installed and enforces them.
- Installed policy
- The policy actually deployed on a gateway, which should be verified by target, package, and time rather than inferred from an editing view.
- WatchDog status
- Evidence about monitored Check Point processes, useful for investigation but insufficient alone to prove that every dependent service is responsive.
- Logging pipeline
- The path from event generation through transmission, receipt, storage, indexing, and query visibility, where separate failures can make records appear absent.
- IKE negotiation
- The authenticated key-management negotiation used in the VPN design, whose success must be distinguished from protected application delivery and later rekey behavior.
- IPsec security association
- The relevant security state and parameters protecting selected traffic, not a universal guarantee of correct endpoint behavior or all application permissions.
- Traffic selector
- The protected traffic range or conditions agreed or configured for a tunnel, which must cover the actual flow rather than merely a related subnet.
- NAT traversal
- An encapsulation mechanism that can carry IPsec traffic through translating devices, changing the outer traffic a capture and path must handle.
- Inner and outer packets
- The distinction between the original protected flow and the tunnel-endpoint encapsulation visible on an external path, important for correct filter interpretation.
- Cluster member role
- A member’s operating state interpreted in the configured availability mode, which must be correlated with interface, synchronization, and service-readiness evidence.
- Delta synchronization
- Ongoing transfer of relevant state changes between cluster members, monitored separately from role labels and the completion of initial state synchronization.
- Critical Device
- A monitored ClusterXL condition or process reported through a pnote, whose actual problematic state can affect the member’s operational readiness.
- CPView
- A built-in text-based Check Point utility displaying operational statistics, requiring correct time, system context, and metric interpretation during performance analysis.
- Cumulative counter
- An accumulated measurement whose interval change can be useful only after accounting for the sampling basis, counter resets, and relevant device context.