Exam 156-215.81.20 topic 1 question 18 discussion

After you activate the Identity Awareness Software Blade, you can create access role objects and use them in the Source and Destination columns of Access Control Policy rules. https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_SecurityManagement_AdminGuide/Topics-SECMG/Access-Roles.htm?Highlight=identity%20awareness

Its D because it involves creating access control policies that links users and groups via the use of identity management systems - IDS

I believe D is correct. Initially thought C however this is a tricky question. The wording of the question says blades that “enables access control policies to accept, drop, or limit website access BASED on user, group, and/or machine. If you was to only enable the Application control blade you would only be able to create access rules based on ip addressing. Application control is the blade that enforces the access rules but Identity awareness is the blade that ENABLES you to utilise user/group/machine.

Applicattion Control and URL FIltering are the blades that "enables" Access Control to accept/drop/limit web access... but It's true that they use user/machine info of the Identity Awareness but tha blade that "enable access control..." is Application Control. "Which software blade enables Access Control policies to accept, drop, or limit web site access based on user, group, and/or machine?"

As CP employ, D

Identity awareness blade ENABLES the access control policy to accept/drop/limit. Keyword is enable. The IA blade makes it possible for the App Control blade to block/accept/limit

C. Application Control Application Control allows granular control over specific web-enabled applications and can enforce policies based on user, group, and machine. Identity Awareness is indeed a crucial software blade that helps in identifying users and machines, allowing for more granular access control policies. However, it does not directly control or limit website access. Instead, it works in conjunction with other blades to provide identity-based access control.

C.The software blade that enables Access Control policies to accept, drop, or limit website access based on user, group, and/or machine is the Application Control Software Blade. This blade allows for granular control over web applications and network protocols, enabling you to create policies based on users or groups to identify, block, or limit usage of web applications.

C.The software blade that enables Access Control policies to accept, drop, or limit website access based on user, group, and/or machine is the Application Control Software Blade. This blade allows for granular control over web applications and network protocols, enabling you to create policies based on users or groups to identify, block, or limit usage of web applications.

C. Application Control The Application Control software blade allows Access Control policies to accept, drop, or limit access to websites and applications based on user, group, and/or machine criteria.

D. Identity Awareness

It's D