156-215.80 · Question #412
Which one of the following is TRUE?
The correct answer is C. Inline layer can be defined as a rule action. In Check Point R80 policy, an inline layer is defined directly as a rule's action, causing matched traffic to be evaluated by that sub-policy before continuing.
Question
Which one of the following is TRUE?
Options
- AOrdered policy is a sub-policy within another policy
- BOne policy can be either inline or ordered, but not both
- CInline layer can be defined as a rule action
- DPre-R80 Gateways do not support ordered layers
How the community answered
(33 responses)- A3% (1)
- B9% (3)
- C70% (23)
- D18% (6)
Why each option
In Check Point R80 policy, an inline layer is defined directly as a rule's action, causing matched traffic to be evaluated by that sub-policy before continuing.
An ordered layer is not a sub-policy inside another policy - ordered layers are top-level layers processed sequentially in the policy package, not nested within a parent rule.
A policy package can contain both ordered layers (top-level sequential) and inline layers (nested rule actions) simultaneously; they are not mutually exclusive.
An inline layer is a sub-policy attached as the action of a specific rule. When traffic matches that rule, it is redirected into the inline layer for further inspection. This allows granular, nested policy enforcement within a single rule base.
Pre-R80 gateways do support ordered layers in a compatibility mode; it is inline layers that pre-R80 gateways cannot process.
Concept tested: Check Point R80 inline layer as rule action
Source: https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/CP_R80.40_SecurityManagement_AdminGuide/Content/Topics-SMAG/Inline-Layers.htm
Topics
Community Discussion
No community discussion yet for this question.