Check Point Certified Security Expert (CCSE) R80 — Question 180

SandBlast appliances can be deployed in the following modes:

Answer options

• A. using a SPAN port to receive a copy of the traffic only
• B. detect only
• C. inline/prevent or detect
• D. as a Mail Transfer Agent and as part of the traffic flow only

Correct answer: C

Explanation

The correct answer is C because SandBlast appliances can function in both inline mode for prevention and detection. Option A is incorrect because it only involves receiving a copy of the traffic, which limits its functionality. Option B is wrong since it implies that the appliance does not prevent threats, and Option D is inaccurate as it misrepresents the appliance's role in traffic handling.