CheckPoint 156-536 Exam Dumps

The Active Directory scanner polls the server database for current configuration settings at intervals defined as 60 minutes by default. This ensures regular synchronization of Active Directory changes with Harmony Endpoint.

Exact Extract from Official Document:

'The Scan Interval is the time, in minutes, between the requests... default is typically every 60 minutes.'

Check Point Harmony Endpoint Specialist R81.20 Administration Guide, 'Configuring a Directory Scanner Instance.'

The Media Encryption & Port Protection component specifically safeguards sensitive information by encrypting data and mandating authorization for access to storage devices, removable media, and other input/output devices. Users need explicit authorization to interact with these encrypted storage devices.

Exact Extract from Official Document:

'The Media Encryption & Port Protection component protects sensitive information by encrypting data and requiring authorization for access to storage devices, removable media, and other input/output devices.'

Check Point Harmony Endpoint Specialist R81.20 Administration Guide, Section: 'Media Encryption & Port Protection'.

External Endpoint Policy Servers (EPS) are optional components in the Harmony Endpoint architecture, designed to enhance performance in large or geographically distributed environments. Their primary function is to offload tasks from the Endpoint Security Management Server (EMS) and optimize network resource usage across sites. The CP_R81.20_Harmony_Endpoint_Server_AdminGuide.pdf provides a clear description of this role.

On page 25, under the section 'Optional Endpoint Security Elements,' the documentation states:

'Endpoint Policy Servers improve performance in large environments by managing most communication with the Endpoint Security clients. Managing the Endpoint Security client communication decreases the load on the Endpoint Security Management Server, and reduces the bandwidth required between sites. The Endpoint Policy Server handles heartbeat and synchronization requests, Policy downloads, Anti-Malware updates, and Endpoint Security client logs.'

This extract explicitly confirms that EPS:

Decrease the load on the EMS: By taking over client communication tasks (e.g., policy downloads, heartbeat requests, and log uploads), EPS reduce the processing burden on the central EMS.

Reduce the bandwidth required between sites: In distributed environments, clients connect to a local EPS rather than a distant EMS, minimizing the data transfer across site boundaries.

Option D accurately reflects this dual role, making it the correct answer. Let's evaluate the other options for clarity:

Option A ('Decrease policies and reduce traffic between sites'): EPS do not decrease the number of policies; policies are still defined and managed by the EMS. While 'reduce traffic' could loosely align with bandwidth reduction, it lacks the specificity of 'load on the EMS,' making it incomplete.

Option B ('Decrease power and reduce accidents between sites'): This is irrelevant to endpoint security, as 'power' and 'accidents' are not concepts addressed in the context of EPS functionality.

Option C ('Decrease clients and reduce device agents between sites'): EPS do not reduce the number of clients or agents; they manage existing clients more efficiently, so this option is incorrect.

Thus, Option D is the only choice fully supported by the documentation, providing a precise and complete description of EPS functionality.

CP_R81.20_Harmony_Endpoint_Server_AdminGuide.pdf, Page 25: 'Optional Endpoint Security Elements' (describes EPS role in decreasing EMS load and reducing bandwidth).

Ransomware is a form of malicious software (malware) where an attacker encrypts the victim's data, rendering it inaccessible. The attacker then demands a ransom payment from the victim to provide the decryption key that will restore access to the data.

Exact Extract from Official Document:

'Before a Ransomware attack can encrypt files, Anti-Ransomware backs up your files to a safe location. After the attack is stopped, it deletes files involved in the attack and restores the original files from the backup location.' This indicates that ransomware encrypts files, confirming that the attacker encrypts the files and demands a payment for a decryption key.

Check Point Harmony Endpoint Specialist R81.20 Administration Guide, Section: 'Anti-Ransomware'.