exam questions

Exam 156-215.80 All Questions

View all questions & answers for the 156-215.80 exam

Exam 156-215.80 topic 1 question 97 discussion

Actual exam question from Checkpoint's 156-215.80
Question #: 97
Topic #: 1
[All 156-215.80 Questions]

Web Control Layer has been set up using the settings in the following dialogue:

Consider the following policy and select the BEST answer.

  • A. Traffic that does not match any rule in the subpolicy is dropped.
  • B. All employees can access only Youtube and Vimeo.
  • C. Access to Youtube and Vimeo is allowed only once a day.
  • D. Anyone from internal network can access the internet, expect the traffic defined in drop rules 5.2, 5.5 and 5.6.
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️
Policy Layers and Sub-Policies -
R80 introduces the concept of layers and sub-policies, allowing you to segment your policy according to your network segments or business units/functions. In addition, you can also assign granular privileges by layer or sub-policy to distribute workload and tasks to the most qualified administrators
✑ With layers, the rule base is organized into a set of security rules. These set of rules or layers, are inspected in the order in which they are defined, allowing control over the rule base flow and the security functionalities that take precedence. If an ג€acceptג€ action is performed across a layer, the inspection will continue to the next layer. For example, a compliance layer can be created to overlay across a cross-section of rules.
✑ Sub-policies are sets of rules that are created for a specific network segment, branch office or business unit, so if a rule is matched, inspection will continue through this subset of rules before it moves on to the next rule.
✑ Sub-policies and layers can be managed by specific administrators, according to their permissions profiles. This facilitates task delegation and workload distribution.
Reference:
https://community.checkpoint.com/docs/DOC-1065

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
gordonF
6 months ago
D is not correct. They are allowed to go to the internet, but not to specific URLs, Categories and High risk apps.
upvoted 2 times
babochnik
3 months ago
please take a look 1st screenshot ;) D is correct
upvoted 1 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago