Check Point Certified Security Administrator (CCSA) Practice Exam

Core Protections are installed as part of what Policy?

1. Access Control Policy.

2. Desktop Firewall Policy

3. Mobile Access Policy.

4. Threat Prevention Policy.

The correct answer is: Access Control Policy.

The correct answer relates to how Core Protections are implemented within the security framework of a network managed by Check Point products. Core Protections are fundamental security measures that provide baseline defenses against various types of attacks and threats. These protections include features like antivirus, anti-bot, and intrusion prevention systems. Typically, these core protections are integrated into the Threat Prevention Policy. This policy is designed to ensure comprehensive threat management by enabling and configuring the various security blades offered by Check Point, such as intrusion prevention and antivirus capabilities. The Threat Prevention Policy allows administrators to define how these core protections operate, specifying the actions the firewall should take when threats are detected, thus forming the backbone of an effective security posture. While Access Control Policy focuses primarily on permitting or denying access to specific resources based on user roles or attributes, it does not encompass the various layers of threat protection that Core Protections provide. Desktop Firewall Policy primarily deals with security measures designed specifically for endpoint devices, and Mobile Access Policy is tailored for mobile users, without incorporating the full suite of threat prevention mechanisms. Therefore, the Threat Prevention Policy is the appropriate context for Core Protections.