For identity Awareness what is the PDP process?

Question

Options

• AIdentity server
• BCaptive Portal Service
• CUser Auth Database
• DLog Sifter

• A
  93% (25)
• B
  4% (1)
• D
  4% (1)

Explanation

Option A is correct because in Check Point Identity Awareness, the Identity Server acts as the PDP (Policy Decision Point) - it collects and stores identity-to-IP mappings, makes authorization decisions based on that identity data, and shares those decisions with enforcement points (gateways).

Why the distractors are wrong:

• B (Captive Portal Service) is an identity acquisition method (a login page that captures credentials), not a decision-making component.
• C (User Auth Database) is a credential store - it holds user data but doesn't make policy decisions.
• D (Log Sifter) is an identity source that parses logs (e.g., Active Directory logs) to extract identity info, but it feeds data to the PDP rather than acting as one.

Memory tip: Think PDP = "Policy Decision Point" = the brain. The Identity Server is the brain that decides "who is this user and what are they allowed to do?" - while other components are just its eyes and ears (Captive Portal, Log Sifter) or its memory (User Auth Database).

No community discussion yet for this question.