What are the three main component of Identity Awareness?

Question

Options

• AUser, Active Directory and Access Role
• BIdentity Awareness Blade on Security Gateway, User Database on Security Management Server
• CIdentity Source, Identity Server (PDP) and Identity Enforcement (PEP)
• DClient, SMS and Secure Gateway

• A
  7% (3)
• B
  2% (1)
• C
  87% (40)
• D
  4% (2)

Explanation

Option C is correct because Identity Awareness follows the standard policy framework architecture: an Identity Source (where identity data originates, e.g., Active Directory, RADIUS, or browser-based login), an Identity Server acting as the PDP (Policy Decision Point, which collects and processes identity information), and Identity Enforcement acting as the PEP (Policy Enforcement Point, which applies access rules based on that identity).

Option A lists identity-related objects (users, AD, roles) rather than the architectural components of the system - these are inputs or configurations, not the functional layers.

Option B describes deployment locations (blade on gateway, database on management server), which is a partial infrastructure view but not the conceptual three-component model being tested.

Option D references "Client, SMS, and Secure Gateway," which loosely echoes Check Point's general architecture but has no specific mapping to Identity Awareness's defined components.

Memory tip: Think "Source → Server → Enforce" - identity comes from a source, a server decides (PDP = Policy Decision Point), and the gateway enforces (PEP = Policy Enforcement Point). The acronym SSE or the phrase "Someone Said Enforce it" can help lock in the order.

No community discussion yet for this question.