Check Point Certified Security Expert (CCSE) R81 — Question 304

How does the Anti-Virus feature of the Threat Prevention policy block traffic from infected websites?

Answer options

• A. By matching logs against ThreatCloud information about the reputation of the website.
• B. By dropping traffic that is not proven to be from clean websites in the URL Filtering blade
• C. By allowing traffic from websites that are known to run Antivirus Software on servers regularly
• D. By dropping traffic from websites identified through ThreatCloud Verification and URL Caching

Correct answer: D

Explanation

The correct answer is D because it specifically mentions the use of ThreatCloud Verification and URL Caching to identify and block harmful websites. Option A is incorrect as it refers to matching logs rather than actively blocking traffic. Option B focuses on URL Filtering but does not address the Anti-Virus feature's method. Option C is wrong as it suggests allowing traffic from sites running Antivirus, which is not indicative of their safety.