156-215.80 · Question #281
John Adams is an HR partner in the ACME organization. ACME IT wants to limit access to HR servers to designated IP addresses to minimize malware infection and unauthorized access risks. Thus, the…
The correct answer is C. The access should be changed to authenticate the user instead of the PC. This question tests understanding of Check Point Identity Awareness, which shifts access control from IP-based to user-based authentication, allowing users to access resources from any location.
Question
Options
- AJohn should lock and unlock his computer
- BInvestigate this as a network connectivity issue
- CThe access should be changed to authenticate the user instead of the PC
- DJohn should install the Identity Awareness Agent
How the community answered
(14 responses)- B7% (1)
- C79% (11)
- D14% (2)
Why each option
This question tests understanding of Check Point Identity Awareness, which shifts access control from IP-based to user-based authentication, allowing users to access resources from any location.
Locking and unlocking a computer has no effect on firewall rules or IP-based access control policies.
John's inability to roam is a deliberate policy restriction tied to a static IP rule, not a network connectivity fault.
When access is granted based on a static IP address, the user is locked to a specific machine at a specific desk. Enabling Identity Awareness and reconfiguring the rule to authenticate the user identity (rather than the PC's IP) allows John to access the HR Web Server from any machine or location within the organization. This is the policy-level change the IT administrator must make to decouple the access grant from the IP address.
Installing the Identity Awareness Agent is an end-user client action, not the IT administrator policy change required; also, the agent alone without a policy rule change does not solve the problem.
Concept tested: Check Point Identity Awareness user-based access control
Source: https://sc1.checkpoint.com/documents/R77/CP_R77_IdentityAwareness_AdminGuide/html_frameset.htm
Topics
Community Discussion
No community discussion yet for this question.