156-215.80 · Question #311
SandBlast has several functional components that work together to ensure that attacks are prevented in real-time. Which the following is NOT part of the SandBlast component?
The correct answer is C. Mail Transfer Agent. The core SandBlast components are Threat Emulation, Threat Extraction, and ThreatCloud - the Mail Transfer Agent is a network inspection mode and not classified as a distinct SandBlast functional component.
Question
SandBlast has several functional components that work together to ensure that attacks are prevented in real-time. Which the following is NOT part of the SandBlast component?
Options
- AThreat Emulation
- BMobile Access
- CMail Transfer Agent
- DThreat Cloud
How the community answered
(22 responses)- C95% (21)
- D5% (1)
Why each option
The core SandBlast components are Threat Emulation, Threat Extraction, and ThreatCloud - the Mail Transfer Agent is a network inspection mode and not classified as a distinct SandBlast functional component.
Threat Emulation is a core SandBlast component that executes suspicious files in isolated virtual environments to detect zero-day and unknown malware before it reaches users.
Mobile Access is associated with Check Point's SandBlast Mobile solution, which extends SandBlast threat prevention to mobile devices, giving it a recognized role within the broader SandBlast product family.
The Mail Transfer Agent (MTA) is a network delivery mechanism that allows a gateway to intercept and hold SMTP traffic for inspection, but it is not a core SandBlast component in its own right. The primary SandBlast components - Threat Emulation, Threat Extraction, and ThreatCloud - perform the actual threat detection, sandboxing, and intelligence functions that define the SandBlast suite.
ThreatCloud is a core SandBlast component providing real-time collaborative threat intelligence derived from a global network of Check Point gateways and sensors.
Concept tested: Check Point SandBlast functional components
Source: https://www.checkpoint.com/products/sandblast-network/
Topics
Community Discussion
No community discussion yet for this question.