For Identity Awareness, what is the PDP process?

The correct answer is A. Identity server. In Check Point Identity Awareness, the PDP (Policy Decision Point) is the Identity Server (option A) - the component responsible for collecting user identity information from various sources (such as Active Directory) and making identity-based policy decisions that are then…

Troubleshoot R81.20 Security Features

Question

Options

AIdentity server
BLog Sifter
CCaptive Portal Service
DUserAuth Database

How the community answered

(42 responses)

A
93% (39)
C
5% (2)
D
2% (1)

Explanation

In Check Point Identity Awareness, the PDP (Policy Decision Point) is the Identity Server (option A) - the component responsible for collecting user identity information from various sources (such as Active Directory) and making identity-based policy decisions that are then enforced by the gateway (PEP).

Why the distractors are wrong:

B (Log Sifter) is not a recognized Identity Awareness architectural component; it has no role in identity policy decisions.
C (Captive Portal Service) is an authentication method used to capture identity - it feeds data into the PDP but is not the PDP itself.
D (UserAuth Database) does not exist as a formal Check Point Identity Awareness component.

Memory tip: Think of the split: PDP = Decision, PEP = Enforcement. The Identity Server is the "brain" that decides who a user is - making it the Policy Decision Point. The Security Gateway then enforces that decision (PEP).

Topics

#Identity Awareness#Policy Decision Point#Identity Server#Access Control

Community Discussion

No community discussion yet for this question.

Full 156-587 Practice