nerdexam
Check_Point

156-215.80 · Question #266

You are about to test some rule and object changes suggested in an R77 news group. Which backup solution should you use to ensure the easiest restoration of your Security Policy to its previous…

The correct answer is C. Database Revision Control. Database Revision Control is the easiest way to save and restore a specific Security Policy configuration in Check Point R77 because it is built into SmartDashboard and operates at the policy level.

Security Policy Management

Question

You are about to test some rule and object changes suggested in an R77 news group. Which backup solution should you use to ensure the easiest restoration of your Security Policy to its previous configuration after testing the changes?

Options

  • AManual copies of the directory $FWDIR/conf
  • Bupgrade_export command
  • CDatabase Revision Control
  • DGAiA backup utilities

How the community answered

(47 responses)
  • A
    2% (1)
  • B
    4% (2)
  • C
    94% (44)

Why each option

Database Revision Control is the easiest way to save and restore a specific Security Policy configuration in Check Point R77 because it is built into SmartDashboard and operates at the policy level.

AManual copies of the directory $FWDIR/conf

Manual copies of $FWDIR/conf can work but require manual file management, correct permissions, and knowledge of which files to copy and restore - making it error-prone and not the easiest method.

Bupgrade_export command

upgrade_export is intended for migrating configuration between versions or appliances, not for quick policy rollback during routine testing.

CDatabase Revision ControlCorrect

Database Revision Control is integrated directly into SmartDashboard and allows administrators to create named snapshots of the entire policy database before making changes, then perform a one-click restore to any saved revision. It is specifically designed for policy-level rollback, making it the easiest and most targeted method for restoring a Security Policy to a prior state without affecting OS-level configuration.

DGAiA backup utilities

GAiA backup utilities perform a full OS-level snapshot including network settings and the OS itself, which is far more than needed and harder to restore selectively for just a policy change.

Concept tested: Check Point Database Revision Control for policy backup and restore

Source: https://sc1.checkpoint.com/documents/R77/CP_R77_SmartCenter_AdminGuide/html_frameset.htm

Topics

#Database Revision Control#backup#security policy#configuration management

Community Discussion

No community discussion yet for this question.

Full 156-215.80 Practice