156-315.81.20 · Question #213
The back-end database for Check Point Management uses:
The correct answer is A. PostgreSQL. See the full explanation below for the reasoning.
Question
The back-end database for Check Point Management uses:
Options
- APostgreSQL
- BMongoDB
- CMySQL
- DDBMS
How the community answered
(22 responses)- A73% (16)
- B5% (1)
- C18% (4)
- D5% (1)
Community Discussion
4The answer is A, PostgreSQL. Check Point R81.20 management uses PostgreSQL as its back-end database engine, which replaced the older CPDB/DBMS approach in recent releases and is why you will see references to postgres processes running on the management server.
So this one tripped me up the first time I saw it too, because I assumed Check Point would use something more "enterprise-y" like Oracle or maybe a NoSQL option. But the answer is A, PostgreSQL, which makes sense once you know that Check Point Security Management Server has been using an open-source relational database under the hood for a while now, storing policy objects, logs metadata, and admin session info in a structured way. The relational model fits well here because management data has a lot of foreign-key type relationships between objects, rules, and gateways. Quick question though, does anyone know if the embedded Postgres instance is directly accessible or if Check Point abstracts it completely so you never interact with it outside of API calls? Asking because I want to know if understanding the schema matters for the exam or if it is just a "know the name" kind of answer.
Saw this one and almost second-guessed myself because the interface feels nothing like a traditional relational database setup, but the management server absolutely runs PostgreSQL under the hood, and you can verify it yourself by poking around the server after installation. On my actual exam I remembered a troubleshooting session where a colleague ran a query directly against the PostgreSQL instance to pull object data, and that mental image locked in the answer immediately.
Solid recall, and worth adding that in a Maestro environment the SMO itself also leans on that same PostgreSQL backend for policy and object storage across the security groups, so understanding the database layer pays off beyond single-domain deployments too.