nerdexam
Check_Point

156-215.80 · Question #243

You have two rules, ten users, and two user groups in a Security Policy. You create database version 1 for this configuration. You then delete two existing users and add a new user group. You modify…

The correct answer is D. Restore the entire database, except the user database. Check Point's database restore allows selective restoration, enabling a rollback of only the rule base while preserving the current user database.

Security Policy Management

Question

You have two rules, ten users, and two user groups in a Security Policy. You create database version 1 for this configuration. You then delete two existing users and add a new user group. You modify one rule and add two new rules to the Rule Base. You save the Security Policy and create database version 2. After a while, you decide to roll back to version 1 to use the Rule Base, but you want to keep your user database. How can you do this?

Options

  • ARun fwm dbexport -1 filename. Restore the database. Then, run fwm dbimport -1 to import the
  • BRun fwm_dbexport to export the user database. Select restore the entire database in the
  • CRestore the entire database, except the user database, and then create the new user and user
  • DRestore the entire database, except the user database.

How the community answered

(39 responses)
  • A
    10% (4)
  • B
    26% (10)
  • C
    5% (2)
  • D
    59% (23)

Why each option

Check Point's database restore allows selective restoration, enabling a rollback of only the rule base while preserving the current user database.

ARun fwm dbexport -1 filename. Restore the database. Then, run fwm dbimport -1 to import the

The fwm dbexport/dbimport commands with the -l flag are used for LDAP-related operations, and the described workflow does not correctly achieve keeping the current user database while reverting only the rule base.

BRun fwm_dbexport to export the user database. Select restore the entire database in the

Running fwm_dbexport to save the user database and then restoring the entire database would require a subsequent re-import step; this is a more complex and error-prone approach compared to the direct selective restore option.

CRestore the entire database, except the user database, and then create the new user and user

Manually recreating the new user and user groups after a full restore is unnecessary extra work when the platform natively supports restoring all components except the user database.

DRestore the entire database, except the user database.Correct

Check Point SmartDashboard's database versioning feature supports partial restores. By restoring the entire database except the user database, the rule base reverts to version 1 while the current user database - including the newly added group and modified users - remains intact. This is the built-in mechanism for selective policy rollback.

Concept tested: Check Point database version rollback with selective user database retention

Source: https://sc1.checkpoint.com/documents/R77/CP_R77_Firewall_AdminGuide/html_frameset.htm

Topics

#database versioning#policy rollback#user database#fwm commands

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 156-215.80 Practice