nerdexam
Check_Point

156-215.80 · Question #499

Which of the following is NOT an identity source used for Identity Awareness?

The correct answer is B. UserCheck. UserCheck is not an Identity Awareness identity source - it is a user notification and interaction mechanism, not a method for acquiring user-to-IP identity mappings.

User Management and Authentication

Question

Which of the following is NOT an identity source used for Identity Awareness?

Options

  • ARemote Access
  • BUserCheck
  • CAD Query
  • DRADIUS

How the community answered

(47 responses)
  • A
    2% (1)
  • B
    87% (41)
  • C
    9% (4)
  • D
    2% (1)

Why each option

UserCheck is not an Identity Awareness identity source - it is a user notification and interaction mechanism, not a method for acquiring user-to-IP identity mappings.

ARemote Access

Remote Access VPN is a supported Identity Awareness identity source because authenticated VPN sessions provide a direct and reliable user-to-IP mapping.

BUserCheckCorrect

Identity Awareness collects user-to-IP address mappings from dedicated identity sources such as AD Query, RADIUS Accounting, and Remote Access VPN. UserCheck is a distinct Check Point software blade that presents interactive policy notifications and justification prompts to end users, and it does not supply identity information to the Identity Awareness engine.

CAD Query

AD Query is a core Identity Awareness identity source that reads Windows Security Event logs from Active Directory domain controllers to map usernames to IP addresses in real time.

DRADIUS

RADIUS Accounting is a supported identity source that allows Identity Awareness to receive user authentication events from RADIUS-enabled network access devices such as wireless controllers or VPN concentrators.

Concept tested: Check Point Identity Awareness supported identity source types

Source: https://sc1.checkpoint.com/documents/R81/CP_R81_IdentityAwareness_AdminGuide/html_frameset.htm

Topics

#Identity Awareness#Identity Sources#AD Query#RADIUS

Community Discussion

No community discussion yet for this question.

Full 156-215.80 Practice