nerdexam
Check_Point

156-215.80 · Question #410

Which two Identity Awareness commands are used to support identity sharing?

The correct answer is A. Policy Decision Point (PDP) and Policy Enforcement Point (PEP). Check Point Identity Awareness uses Policy Decision Point (PDP) and Policy Enforcement Point (PEP) as the two defined roles that enable identity acquisition and cross-gateway identity sharing.

User Management and Authentication

Question

Which two Identity Awareness commands are used to support identity sharing?

Options

  • APolicy Decision Point (PDP) and Policy Enforcement Point (PEP)
  • BPolicy Enforcement Point (PEP) and Policy Manipulation Point (PMP)
  • CPolicy Manipulation Point (PMP) and Policy Activation Point (PAP)
  • DPolicy Activation Point (PAP) and Policy Decision Point (PDP)

How the community answered

(35 responses)
  • A
    89% (31)
  • B
    3% (1)
  • C
    6% (2)
  • D
    3% (1)

Why each option

Check Point Identity Awareness uses Policy Decision Point (PDP) and Policy Enforcement Point (PEP) as the two defined roles that enable identity acquisition and cross-gateway identity sharing.

APolicy Decision Point (PDP) and Policy Enforcement Point (PEP)Correct

In Check Point Identity Awareness, the PDP (Policy Decision Point) gateway acquires identity information from sources such as Active Directory Query or Identity Agents and is responsible for sharing that identity data with other gateways. The PEP (Policy Enforcement Point) gateway receives identity information from a PDP and enforces access control policy based on user and machine identities, enabling identity sharing across a distributed environment.

BPolicy Enforcement Point (PEP) and Policy Manipulation Point (PMP)

Policy Manipulation Point (PMP) is not a defined role in Check Point Identity Awareness; only PDP and PEP exist as the recognized identity sharing components.

CPolicy Manipulation Point (PMP) and Policy Activation Point (PAP)

Neither Policy Manipulation Point (PMP) nor Policy Activation Point (PAP) are valid components in the Check Point Identity Awareness architecture.

DPolicy Activation Point (PAP) and Policy Decision Point (PDP)

Policy Activation Point (PAP) is not a defined Check Point Identity Awareness component and does not appear in the identity sharing model.

Concept tested: Check Point Identity Awareness PDP and PEP identity sharing roles

Source: https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_IdentityAwareness_AdminGuide/Topics-IAAG/Identity-Sharing.htm

Topics

#Identity Awareness#PDP#PEP#identity sharing

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 156-215.80 Practice