Check Point Certified Security Administrator (CCSA) Practice Exam

In HTTPS Inspection policy, what actions are available in the "Actions" column of a rule?

1. "Inspect", "Bypass"

2. "Inspect", "Bypass", "Categorize"

3. "Inspect", "Bypass", "Block"

4. "Detect", "Bypass"

The correct answer is: "Inspect", "Bypass"

In HTTPS Inspection policy, the "Actions" column of a rule is designed to specify how the traffic will be handled when it matches certain criteria. The options available typically include "Inspect" and "Bypass." "Inspect" allows the security device to decrypt and analyze the HTTPS traffic for potential threats, ensuring that malicious activities can be detected within secure connections. On the other hand, "Bypass" provides an option to allow the encrypted traffic to pass through the system without any inspection. This may be necessary for scenarios where performance is critical, or the content is trusted and does not require examination. While other choices might include additional actions like "Categorize" or "Block," these do not accurately represent the standard actions available specifically in the context of HTTPS Inspection. For instance, "Categorize" is not a typical action in HTTPS inspection, as the focus is primarily on inspection or bypassing traffic. Similarly, "Block" does not apply directly, as the rule set in HTTPS Inspection is more about handling traffic transparently rather than outright blocking it, which is more relevant in general firewall rules. Thus, the inclusion of "Inspect" and "Bypass" as the established actions for HTTPS Inspection is correct and aligns with the intended functionality of