Checkpoint Updated 156-536 Exam Questions and Answers by nikola

The transition of the Anti-Malware engine from Kaspersky to Sophos in the Check Point Harmony Endpoint Client occurred with the release of Endpoint Client E84.40 and higher, and this change applies universally to all deployments, including both Cloud and On-premises environments. While theCP_R81.20_Harmony_Endpoint_Server_AdminGuide.pdfdoes not explicitly detail the exact version of this switch within its text, it provides general information about the Anti-Malware component on page 311 under the "Anti-Malware" section, stating that it "protects clients from known and unknown viruses, worms, Trojan horses, adware, and keystroke loggers." The lack of a specific version mention in the document suggests that this information aligns with broader Check Point product knowledge and release notes external to this specific administration guide. Among the options provided, option B (E84.40 and higher for all deployments) is the most accurate and comprehensive, as it does not limit the change to specific deployment types (e.g., Cloud or On-premises), unlike options A, C, and D. This reflects a logical deduction based on typical product evolution timelines and option analysis, ensuring applicability across all Harmony Endpoint deployments.

The Check Point Consolidated Cyber Security Architecture is designed to integrate multiple security functions into a unified platform. This architecture provides "consolidated security functions," which is its primary benefit. This means it combines endpoint protection, data security, and threat prevention into a single, manageable system, improving efficiency and simplifying security administration for organizations. While "Consolidated network functions" (A) might sound similar, it’s too vague and not the focus of the architecture. "Single policy" (B) is not highlighted as a standalone benefit, and "Decentralized management" (C) contradicts the centralized approach of this architecture. Thus, "Consolidated security functions" (D) is the correct answer, as it aligns directly with the documented advantages.

Preparing a client for Full Disk Encryption (FDE) installation and deployment involves ensuring that the endpoint meets specific prerequisites. TheCP_R81.20_Harmony_Endpoint_Server_AdminGuide.pdfexplicitly outlines these requirements.

Onpage 249, under "Client Requirements for Full Disk Encryption Deployment," the document states:

"Before deploying Full Disk Encryption, ensure that the client machine meets the minimum system requirements."

This statement directly indicates that administrators can begin preparing the client for FDE installation and deployment once the client machine meets theminimum system requirements, aligning withOption D. The document does not mention "maximum system requirements" (Option A), suggesting it’s an incorrect framing. While having at least 32 MB of continuous space is a specific requirement (see Question 72), it is a subset of the broader "minimum system requirements" rather than the sole condition (Option C). Additionally, policy installation (Option B) occurs after preparation, as detailed onpage 250under "Completing Full Disk Encryption Deployment on a Client," which describes stages like policy application post-preparation.

Thus,Option Dis the most accurate and comprehensive answer based on the official documentation.