Examice

Exam 156-31581 All QuestionsBrowse all questions from this exam

Question 255

After replacing a faulty Gateway the admin installed the new Hardware and want to push the policy. Installing the policy using the SmartConsole he got an Error for the Threat Prevention Policy. There is no error for the Access Control Policy. What will be the most common cause for the issue?

The admin forgot to reestablish the SIC for the new hardware. That is typically the case when configure only the interfaces of the replacement hardware instead restoring a backup.

The IPS Protection engine on the replacement hardware is too old. Before pushing the Threat Prevention Policy use SmartConsole -> Security Policies -> Updates -> IPS 'Update Now' to update the engine.

The admin forgot to apply the new license. The Access Control license is included by default but the service subscriptions for the Threat Prevention Blades are missing.

The Threat Prevention Policy can't be installed on a Gateway without an already installed Access Control Policy. First install only the Access Control Policy.

Correct Answer: C

The most common cause for a Threat Prevention Policy error after replacing a faulty gateway and successfully installing the Access Control Policy is that the admin forgot to apply the new license. The Access Control license is included by default, but the service subscriptions for the Threat Prevention Blades, which are required for the Threat Prevention Policy, are missing. Without the applicable licenses, the Threat Prevention Policy cannot be installed.

Discussion

McBeanoOption: D

I would say D is right, based on this guide for installing a gateway, it instructs to create/install access policy first, followed by creating/installing TP policy. https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_Installation_and_Upgrade_Guide/Topics-IUG/Installing-Security-Gateway.htm

DKangaroo

Question clearly mentions the Access Control Policy is installed without errors "There is no error for the Access Control Policy. " Correct answer is C

ChinkSantana

During policy installation when you get Threat Prevention errors, the access control most likely installed correctly. This does not mean the install was a success. D is correct.

ChinkSantanaOption: D

During policy installation when you get Threat Prevention errors, the access control most likely installed correctly. This does not mean the install was a success. D is correct.

BombastOption: D

Sometimes there is the need to reinstall the Access Control policy first after major changes are made to Threat Prevention, and this will cause the TP policy installation to fail. But there is a different message to that effect when that occurs which does not match your situation.

BasselhOption: D

D is correct

DaNhiConOption: C

Question clearly mentions the Access Control Policy is installed without errors "There is no error for the Access Control Policy. " Correct answer is C

DKangarooOption: C

Need to apply the Threat Prevention License Keys/Contract files as they are subscription based. ACL (FW blade) are part of Base Perpetual License