156-215.80 · Question #128
In order to modify Security Policies the administrator can use which of the following tools?Select the BEST answer.
The correct answer is D. SmartConsole or mgmt_cli on any computer where SmartConsole is installed. The best and most complete method to modify Check Point Security Policies is via SmartConsole or mgmt_cli, both of which can be used from any computer where SmartConsole is installed, not just the Security Management Server.
Question
In order to modify Security Policies the administrator can use which of the following tools?Select the BEST answer.
Options
- ACommand line of the Security Management Server or mgmt_cli.exe on any Windows computer.
- BSmartConsole and WebUI on the Security Management Server.
- Cmgmt_cli or WebUI on Security Gateway and SmartConsole on the Security Management Server.
- DSmartConsole or mgmt_cli on any computer where SmartConsole is installed.
How the community answered
(41 responses)- A2% (1)
- B2% (1)
- C5% (2)
- D90% (37)
Why each option
The best and most complete method to modify Check Point Security Policies is via SmartConsole or mgmt_cli, both of which can be used from any computer where SmartConsole is installed, not just the Security Management Server.
This answer is incorrect because mgmt_cli is not limited to Windows computers - it is available on any platform where SmartConsole is installed, and it also incorrectly implies the command line of the Security Management Server itself is a primary policy modification method.
SmartConsole is not restricted to running on the Security Management Server itself - it is a remote client that can be installed on any administrator workstation, making this answer inaccurately restrictive.
This answer incorrectly places mgmt_cli and WebUI on the Security Gateway, whereas policy management tools target the Security Management Server, and the Security Gateway is a policy enforcement point, not a management point.
SmartConsole is a client application that can be installed on any administrator workstation and connects remotely to the Security Management Server to modify policies. The mgmt_cli tool can also be run from any machine where SmartConsole is installed, providing CLI-based policy management. This answer correctly identifies both tools and the correct scope of where they can be used.
Concept tested: Check Point Security Policy management tools and access scope
Source: https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_SecurityManagement_AdminGuide/Content/Topics-ASMG/Managing-Policies.htm
Topics
Community Discussion
No community discussion yet for this question.