Check Point Certified Security Administrator (CCSA) R82 Exam Materials - Question #43 Discussion

Comment Image Comment Image Comment Image

What is the difference between the Positive Control Model and the Negative Control Model? (Choose one answer)

  • A. The Positive Control Model allows is what routers use and simply route traffic with no security rules. The Negative Control Model is what firewalls use and they require explicit rules to allow and route traffic.
  • B. The Positive Control Model allows specific, approved actions or traffic and blocks everything else. The Negative Control Model begins by blocking specific, known threats, or unwanted actions and allows everything else.
  • C. The Positive Control Model begins by blocking specific, known threats, or unwanted actions and allows everything else. The Negative Control Model allows specific, approved actions or traffic and blocks everything else.
  • D. The Positive Control Model aims to keep administrators in a positive mind set. The Negative Control Model results in administrators having a negative mind set.
Correct Answer: B

Brave-Dump Community Votes

Answer: B (1 vote) 100%

Community Explanations & Comments (1)

Anonymous User 1 month ago
Selected: B
Positive Control = allow specific, block everything else. Negative Control = block specific, allow everything else. Use allow‑lists for high‑security needs and block‑lists as a complementary layer.