Check Point Certified Security Expert (CCSE) R80 — Question 177

You have a Geo-Protection policy blocking Australia and a number of other countries. Your network now requires a Check Point Firewall to be installed in Sydney,
Australia.
What must you do to get SIC to work?

Answer options

• A. Remove Geo-Protection, as the IP-to-country database is updated externally, and you have no control of this.
• B. Create a rule at the top in the Sydney firewall to allow control traffic from your network
• C. Nothing - Check Point control connections function regardless of Geo-Protection policy
• D. Create a rule at the top in your Check Point firewall to bypass the Geo-Protection

Correct answer: C

Explanation

The correct answer is C because Check Point control connections are designed to function regardless of any Geo-Protection policies in place. Options A and D suggest removing or bypassing the policy, which is unnecessary, while option B incorrectly implies that a specific rule is needed to allow control traffic.