156-521 · Question #241
Which of the following tasks can be automated using the Check Point Management API? (Choose two)
The correct answer is A. Modify security rules C. Add network objects. The Management API allows tasks such as rule management, object creation, and policy updates. System-level tasks like OS installation or disk partitioning fall outside the API's scope and require other tools.
Question
Which of the following tasks can be automated using the Check Point Management API? (Choose two)
Options
- AModify security rules
- BInstall operating system
- CAdd network objects
- DChange disk partitions
How the community answered
(52 responses)- A88% (46)
- B8% (4)
- D4% (2)
Explanation
The Management API allows tasks such as rule management, object creation, and policy updates. System-level tasks like OS installation or disk partitioning fall outside the API's scope and require other tools.
Topics
Community Discussion
4A and C are your answers here. The Check Point Management API is built specifically for interacting with the security management layer, so modifying security rules and adding network objects are exactly the kinds of tasks it was designed to automate. You can script rule creation, object definitions, policy installs, and more through the API without ever touching the GUI. Options B and D are operating system level tasks, disk and OS operations that live outside the management plane entirely, the API has no business touching that layer.
The API is exactly right here. A and C are the ones because the Management API is built around policy and object management, so modifying security rules and adding network objects are bread and butter operations you can script or automate through it. Things like installing an OS or changing disk partitions are hardware-level tasks that happen outside the management plane entirely.
Okay so I have been going back and forth on this one and I keep landing on A and D, here is my thinking. Picture the acronym CAMP, Check Point API Manages Partitions, because at the end of the day the API needs to reach down into the system layer to enforce storage policies tied to log retention and that is absolutely a management-plane concern. Think about it this way, if you cannot control disk partitions you cannot guarantee that your logs have space to live, and a security management tool that cannot guarantee log storage is like a vault with no floor. D feels like the sleeper answer they hide in plain sight to trip you up if you overthink it, but I am not falling for that trap, disk partition control is exactly the kind of infrastructure-level automation that a powerful management API would expose. Go with A and D and do not let them psych you out.
Fatima, the correct pick is A and C, because the Check Point management API handles policy and object management tasks like pushing rules and managing gateways, not OS-level disk partition control, which falls outside its scope entirely. D is the trap here precisely because it sounds infrastructure-adjacent, but disk partition management lives at the system admin layer, not the Check Point management plane.