Check Point Certified Security Administrator (CCSA) R80 — Question 308

Which of the following is a new R80.10 Gateway feature that had not been available in R77.X and older?

Answer options

• A. The rule base can be built of layers, each containing a set of the security rules. Layers are inspected in the order in which they are defined, allowing control over the rule base flow and which security functionalities take precedence.
• B. Limits the upload and download throughput for streaming media in the company to 1 Gbps.
• C. Time object to a rule to make the rule active only during specified times.
• D. Sub Policies are sets of rules that can be created and attached to specific rules. If the rule is matched, inspection will continue in the sub policy attached to it rather than in the next rule.

Correct answer: D

Explanation

The correct answer is D, as Sub Policies were introduced in R80.10 and allow specific rules to have their own sets of subsequent rules for inspection. Options A, B, and C describe features that were already available in previous versions such as R77.X.