Please which book are you referring (name or link) to and where can i get (if you dont mind). I plan on take the exam in some months and i dont feel the admin guide is good enough to prep me for the exam. Thank You
Nanu is right, it is indeed mentioned on page 407 in CCSA book. I don't have a link. You need to participate in official checkpoint training to obtain it.
Excerpt from CCSA R80.10 guide page 407 (copied from csa_r80's comments just in a more readable format, thanks csa_r80 for posting)
Threat Prevention Policy Layer Conflicts
Threat Prevention policy layers can be organized in many ways, such as by specific blades
(Anti-Malware, Anti-Bot, Anti-Virus) or by scope (Data Center to DMZ). Organizing the layers this way can present some issues. For instance, it may present a conflict between an administrator that can make changes to the DMZ and LAN and another administrator who can only make changes from the DMZ to external. In instances like these, there are three conflict resolution rules:
Rule Issue Resolution
Conflict on action: The action for a specified scope is different between layers. The action taken will be the most restrictive.
Conflict on exception: The exceptions for a specified scope is different between layers. The action taken will be the most liberal, or least restrictive.
Conflict on settings: The settings, such as MME nesting, differ between layers. The setting used will be from the first policy layer.
Correct answer is A
CCSA R80.10 guide page 407:
Threat Prevention Policy Layer Conflicts
Threat Prevention policy layers can be organized in many ways, such as by specific blades
(Anti-Malware, Anti-Bot, Anti-Virus) or by scope (Data Center to DMZ). Organizing the
layers this way can present some issues. For instance, it may present a conflict between an
administrator that can make changes to the DMZ and LAN and another administrator who can
only make changes from the DMZ to external. In instances like these, there are three conflict
resolution rules:
Rule Issue Resolution
Conflict on
action
The action for a specified scope is
different between layers.
The action taken will be the most
restrictive.
Conflict on
exception
The exceptions for a specified scope
is different between layers.
The action taken will be the most
liberal, or least restrictive.
Conflict on
settings
The settings, such as MME nesting,
differ between layers.
The setting used will be from the
first policy layer.
The correct answer is A - as DrTee pointed out in the CCSA study guide. I'm not sure how much it differs in different versions of CP, but R80.20 which is what the study guide covers, outlines what answer A entails.
A
https://sc1.checkpoint.com/documents/R77/CP_R77_SecurityManagement_WebAdminGuide/html_frameset.htm?topic=documents/R77/
CP_R77_SecurityManagement_WebAdminGuide/118037
Hi naguinix, where did you find the correct answer ? I'm referring to the R80.30 doc but don't find anything related to conflict resolution rules. Can you provide a link where I can find the answer ? Thanks in advance
upvoted 5 times
...
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Nanu
Highly Voted 4 years, 10 months agoagentjoks
4 years, 9 months agoC4rlos
4 years, 7 months agovhick
Highly Voted 5 years, 4 months agoCycy_mia
Most Recent 1 year, 6 months agoiesnozteldat
2 years, 3 months agoJUSTINzt2
2 years, 4 months agojustmub42
3 years, 4 months agotheManFromRoom5
3 years, 5 months agocsa_r80
3 years, 5 months agoginodgs95
3 years, 7 months agokambata
4 years, 1 month agohllovet
4 years, 3 months agoamuse311
4 years, 3 months agoDrTee
4 years, 6 months agoDrTee
4 years, 5 months agopcortes
4 years, 7 months agoribidibidi
4 years, 11 months agonaguinix
5 years, 7 months agoAlpha9
5 years, 3 months ago