Check Point Certified Security Expert (CCSE) R77 — Question 3

When configuring an LDAP Group object, select option _____ if you want the gateway to reference a specific group defined on the LDAP server for authentication purposes.

Answer options

• A. Group Agnostic
• B. All Account-Unit's Users
• C. Only Sub Tree
• D. Only Group in Branch

Correct answer: C

Explanation

The correct answer is C, 'Only Sub Tree', because it specifies that the gateway should only look at the defined group within the specified subtree for authentication. Options A and B do not limit the reference to a specific group, while D restricts the reference to only groups within a certain branch, which may not meet the requirement for authentication against a specific group.