156-215.82 practice question 9 of 10

You are tasked with setting up a new Check Point environment for your organization. Your manager asks you to explain the roles of each component in…

You are tasked with setting up a new Check Point environment for your organization. Your manager asks you to explain the roles of each component in the Three-Tier Architecture before procurement begins. During your explanation, you need to clarify which component is responsible for storing and managing security policies, and which component enforces those policies at the network perimeter. Which two components fulfill these roles respectively?

Answer options

A: The Security Management Server stores policies; the Security Gateway enforces them at the network edge Correct answer

B: The Security Gateway stores policies; the Security Management Server enforces them at the network edge

C: SmartConsole stores and manages policies; the Security Gateway enforces them

D: The Security Management Server enforces policies; the Log Server stores backup copies for auditing

E: Both the Security Gateway and Security Management Server share policy storage and enforcement responsibilities equally

Correct Answer:

A. The Security Management Server stores policies; the Security Gateway enforces them at the network edge

Explanation

In Check Point's Three-Tier Architecture, the roles of management and enforcement are strictly separated. The Security Management Server (SMS) is the centralized component responsible for storing, managing, and compiling the security policies, objects, and user databases. Once an administrator publishes and installs a policy, the SMS compiles it and pushes it to the enforcement point. The Security Gateway resides at the network perimeter and is strictly responsible for inspecting network traffic and enforcing the compiled security policies it received from the Management Server.

Why Incorrect

B: This option reverses the architectural roles; the Security Gateway enforces policies, while the Security Management Server stores and manages them. C: SmartConsole is merely the GUI client used by administrators to view and configure policies; the actual storage and management occur on the Security Management Server. D: The Security Management Server does not enforce policies on network traffic; enforcement is the sole responsibility of the Security Gateway. E: The roles are strictly separated by design in the Three-Tier Architecture; the Gateway and Management Server do not share storage and enforcement duties equally.

References

Check Point R82 Security Management Administration Guide, Chapter: Introduction to Security Management, Section: Check Point Architecture.

Check Point R82 Security Gateway Guide, Chapter: Core Architecture.

Keep practicing

Take the free 156-215.82 practice test

Ten exam-style questions with answers and explanations, plus the exam facts and study guides.

Start the free practice test