156-215.80 · Question #419
Which of the following methods can be used to update the trusted log server regarding the policy and configuration changes performed on the Security Management Server?
The correct answer is D. Install Policy. Install Policy is the mechanism that pushes policy and configuration changes from the Security Management Server to enforcement points, including the trusted log server.
Question
Which of the following methods can be used to update the trusted log server regarding the policy and configuration changes performed on the Security Management Server?
Options
- ASave Policy
- BInstall Database
- CSave session
- DInstall Policy
How the community answered
(36 responses)- B3% (1)
- C8% (3)
- D89% (32)
Why each option
Install Policy is the mechanism that pushes policy and configuration changes from the Security Management Server to enforcement points, including the trusted log server.
Save Policy writes the policy to the management database locally but does not push or publish any changes to gateways or log servers.
Install Database pushes object and user database updates to gateways but does not install the full security policy or notify the log server of policy-level changes.
Save Session commits the current editing session to the database in multi-admin environments but does not trigger any distribution of policy to external components.
Install Policy compiles and pushes the full security policy from the Security Management Server to all targeted gateways and associated log servers, ensuring all enforcement and logging components reflect the latest configuration. This is the only operation that actively synchronizes policy state to the log server. Without running Install Policy, changes remain unpublished and the log server operates on the previous configuration.
Concept tested: Check Point Install Policy and log server synchronization
Source: https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_SecurityManagement_AdminGuide/Topics-SECMG/Installing-a-Policy.htm
Topics
Community Discussion
No community discussion yet for this question.