156-315.81.20 · Question #209
What are the main stages of a policy installation?
The correct answer is D. Verification, Compilation, Transfer and Commit. See the full explanation below for the reasoning.
Question
What are the main stages of a policy installation?
Options
- AInitiation, Conversion and Save
- BInitiation, Conversion and FWD REXEC
- CVerification, Commit, Installation
- DVerification, Compilation, Transfer and Commit
How the community answered
(30 responses)- A10% (3)
- B3% (1)
- C7% (2)
- D80% (24)
Community Discussion
4D is correct. Policy installation goes through four distinct stages: the Management Server first verifies the policy for errors, then compiles it into an atomic inspection script, transfers the compiled code to the target gateways, and finally commits it so the gateway swaps in the new policy and begins enforcing it. The other options mix in invented terms or collapse real stages together, which is why they fall apart under scrutiny.
D is the right pick. The one that trips people up is C, because "Verification, Commit, Installation" sounds like a logical pipeline, but "commit" in the gateway context means the final push to the kernel tables, not a standalone stage, and "compilation" is the real step where the policy gets converted to an inspection code binary before it ever transfers to the gateways.
I kept circling back to C because "Verification, Commit, Installation" just sounds right in plain English, but what locked in D for me was remembering that the policy has to be compiled into atomic rules and physically transferred to the gateway before anything gets committed, so the process is more granular than C gives it credit for.
Right call, and worth adding that in a Maestro Security Group the compiled policy the SMO receives then gets pushed down to every SGM in the group, so that distribution layer is yet another reason the granularity of D maps closer to what actually happens on the wire than C does.