156-536 practice question 6 of 10

To enforce the FDE policy, the following requirement must be met?

Full set: 98 questions

Answer options

A: The client must obtain an FDE machine-based policy Correct answer

B: The client must obtain an FDE certificate

C: Deployments must consist of at least one post-boot user

D: A recovery file must be encrypted

Correct Answer:

A. The client must obtain an FDE machine-based policy

Explanation

Full Disk Encryption begins only after the endpoint retrieves the dedicated FDE machine-based policy from the Endpoint Management Server; this policy contains the encryption and pre-boot authentication directives required to enforce disk protection.

Why Incorrect

B. FDE certificates are used for recovery, not for initial enforcement of policy.
C. Post-boot users are a usability feature; enforcement does not depend on their existence.
D. Recovery files are created by the management server automatically and need not be encrypted beforehand.

References

1. Check Point Endpoint Security R81.10 Administration Guide, “Full Disk Encryption – Policy Workflow”, p.165: “Encryption starts after the client receives an FDE machine policy.”

2. Check Point sk108699, “Deploying Full Disk Encryption”, Section ‘Policy Prerequisites’.

Keep practicing

Take the free 156-536 practice test

Ten exam-style questions with answers and explanations, plus the exam facts and study guides.

Start the free practice test