Which Check Point software blade provides protection from zero-day and undiscovered threats?
A.
Firewall
B.
Threat Emulation
C.
Application Control
D.
Threat Extraction
Explanation:
SandBlast Threat Emulation
As part of the Next Generation Threat Extraction software bundle (NGTX), the SandBlast Threat
Emulation capability prevents infections from undiscovered exploits zero-day and targeted attacks. This
innovative solution quickly inspects files and runs them in a virtual sandbox to discover malicious behavior.
Discovered malware is prevented from entering the network.
https://www.checkpoint.com/products/next-generation-threat-prevention/
The correct answer is B
9
0
Why not option D? If the system cleans the doc (for example a .xlsm with malicious macro code)it protects you from a zero-day attack and a undiscover
0
3
Because, TX just change the format without analysis, and it supports just a few formats. TE as the question says, provides protection from undiscovr threats, it protects also when the archive is another not supported on TX, like Flash archives.
4
0
I agree. “B.
Threat Emulation”
1
0
D is the correct
0
5
B is correct
3
1
The correct answer is B
As part of the Next Generation Threat Prevention & SandBlast™ software bundle (NGTX), the SandBlast Threat Emulation capability prevents infections from undiscovered exploits zero-day and targeted attacks.
1
0
B is the correct answer. NGTX (Next Gen Threat Extraction) is the software blade PACKAGE that includes the Threat Emulation software blade. So if you are asked for the software blade package, it is NGTX, and if asked for the software blade, it is Threat Emulation.
Confirmed from CCSA Exam
3
0
Threat Emulation – Protection against infections from undiscovered exploits, zero-day and targeted attacks.
1
0
https://www.checkpoint.com/products/threat-emulation-sandboxing/
0
0