Check Point Certified Threat Prevention Expert (CCTPE) — Question 29

An organization is using an adaptive security policy where a Data Center Object was imported and used in some rules. When the cloud resource represented by this object changes it’s IP address, how will the change be effected on the Security Gateway?

Answer options

• A. If CloudGuard Controller is enabled on the Security Gateway, the gateway will connect with the Cloud account and synchronize all the Data Center Objects used on it.
• B. With a properly functioning configuration, the change will automatically be done on the Security Gateway without any action required by the administrator.
• C. The Data Center Object needs to be refreshed in the SmartConsole and then a policy install will be required.
• D. The change is automatically updated to the Security Management Server and so only a policy install from SmartConsole or with API will be required.

Correct answer: B

Explanation

Option B is correct because a properly functioning adaptive security policy allows for automatic updates without administrator intervention. Option A is incorrect as it describes an unnecessary action if synchronization is automatic. Option C is wrong because refreshing and installing a policy is not needed for automatic updates. Option D misstates the process, as policy installation is not required if changes are automatically reflected.