Check Point Certified Automation Specialist (CCAS) — Question 4

What is correct about the Resource Advisor (RAD) service on the Security Gateways?

Answer options

• A. RAD functions completely in user space. The Pattern Matter (PM) module of the CMI looks up for URLs in the cache and if not found, contact the RAD process in user space to do online categorization
• B. RAD is completely loaded as a kernel module that looks up URL in cache and if not found connects online for categorization. There is no user space involvement in this process
• C. RAD is not a separate module, it is an integrated function of the 'fw' kernel module and does all operations in the kernel space
• D. RAD has a kernel module that looks up the kernel cache, notifies client about hits and misses and forwards a-sync requests to RAD user space module which is responsible for online categorization

Correct answer: D

Explanation

The correct answer is D because it accurately describes the hybrid nature of RAD, which involves both kernel and user space operations for online categorization. Option A is incorrect as it suggests that the entire process happens in user space, while B wrongly states that RAD is fully kernel-based without any user space involvement. Option C misrepresents RAD as solely part of the 'fw' kernel module without recognizing its user space component.