Check Point Certified Security Administrator (CCSA) R80 — Question 173
Which statement is TRUE of anti-spoofing?
Answer options
- A. Anti-spoofing is not needed when IPS software blade is enabled
- B. It is more secure to create anti-spoofing groups manually
- C. It is BEST Practice to have anti-spoofing groups in sync with the routing table
- D. With dynamic routing enabled, anti-spoofing groups are updated automatically whenever there is a routing change
Correct answer: C
Explanation
Answer C is correct because having anti-spoofing groups synchronized with the routing table ensures that the security measures are aligned with the current network configuration. Answer A is incorrect as anti-spoofing is important regardless of IPS software blade status. Answer B is misleading because while manual creation can enhance security, it is not necessarily more secure than automated methods. Answer D is inaccurate as dynamic routing can facilitate updates, but it does not guarantee that anti-spoofing groups will always update automatically.