View all questions & answers for the Check Point Certified Security Administrator (CCSA) R82 Exam Materials exam


Check Point Certified Security Administrator (CCSA) R82 Exam Materials-Question 81 Discussion
Comment Image Comment Image Comment Image

You are using a rule to block traffic to a specific https site. However, traffic is not blocked as expected during the first attempts to the site. It will be blocked later. What is the most likely reason? (Choose one answer)

  • A. Categorization is in fail close mode and the requests are not allowed until the categorization is complete.
  • B. Categorization is in hold mode and the requests are not allowed until the categorization is complete.
  • C. Categorization is in Background mode and the requests are allowed until the categorization is complete.
  • D. Categorization is in fail open mode and the requests are allowed until the categorization is complete.
Correct Answer: C

Brave-Dump Clients Votes

C 100%

Comments



Anonymous User 2026-09-09 18:24:11

Selected Answers: C


C. Categorization is in Background mode and the requests are allowed until the categorization is complete.

In Background categorization mode, the first few connections to an uncategorized site are allowed through while the gateway sends the URL to the Check Point Online Web Service for categorization in the background. Once the category is returned and cached, subsequent requests are matched against the policy correctly — which explains why the site isn't blocked on the first attempts but is blocked shortly after.