156-215.80 · Question #451
When a Security Gateways sends its logs to an IP address other than its own, which deployment option is installed?
The correct answer is A. Distributed. In a Distributed deployment, the Security Gateway and Security Management Server reside on separate machines, so the gateway sends logs to a remote IP address rather than its own.
Question
When a Security Gateways sends its logs to an IP address other than its own, which deployment option is installed?
Options
- ADistributed
- BStandalone
- CBridge
How the community answered
(39 responses)- A87% (34)
- B10% (4)
- C3% (1)
Why each option
In a Distributed deployment, the Security Gateway and Security Management Server reside on separate machines, so the gateway sends logs to a remote IP address rather than its own.
A Distributed deployment separates the Security Gateway and Security Management Server onto distinct physical or virtual appliances. Because they are on different machines with different IP addresses, the gateway must forward its logs to the remote Management Server IP, satisfying the condition described in the question.
In a Standalone deployment, both the gateway and management server are co-located on the same machine, so logs are written locally and not sent to a different IP address.
Bridge mode describes a transparent network interface configuration for inline deployment, not a Check Point management or log architecture deployment type.
Concept tested: Check Point Distributed deployment log forwarding architecture
Source: https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_GettingStarted_Guide/Content/Topics-GSG/Deployment-Options.htm
Topics
Community Discussion
No community discussion yet for this question.