156-215.82: Check Point Certified Security Administrator R82Demo

Check Point defines two named enforcement models: a Positive Control Model (Whitelist) that permits only what is explicitly allowed, and a Negative Control Model (Blacklist) that blocks only what is explicitly denied. Application Control & URL Filtering together with Content Awareness in the unified Access Control Policy are described as using the Positive Control Model, where the administrator explicitly defines the applications, sites and content that are permitted. 'Permissive' and 'Restrictive' are distractor labels that Check Point does not use for these blades, so options A and B are eliminated. The Positive/Whitelist wording makes C correct rather than the Negative/Blacklist option D.