Exam 156-215.82 Topic 1 Question 99 Discussion

Actual exam question for CheckPoint's 156-215.82 exam
Question #: 99
Topic #: 1

Choose what best describes how Outbound HTTPS Inspection works.

A. The user's browser and the web server perform the HTTPS negotiation, which is monitored by the Security Gateway to collect the encryption keys. Once the encrypted communication between the user and the web server begins, the Security Gateway intercepts and decrypts it with the acquired encryption key. B. The Security Gateway impersonates the requested Web Site and completes the HTTPS negotiation. A separate HTTPS-encrypted connection is automatically created between Security Gateway and the web server. C. The user must insert a static encryption key provided by the filewall, into their browser. All HTTPS communication by the user's browser is always encrypted with this key. As the key is provided by the Security Gateway, it can decrypt the communication between the user and the web server D. When HTTPS Inspection is enabled on the Security Gateway, a JavaScript payload is sent to the user's browser when a request to connect to HTTPS websites is made. The JavaScript code inserts a Browser Helper Module (BHO) that helps detects and shares the encryption key with the Security Gateway.

Suggested Answer: B Vote an answer

The correct answer is B. Outbound HTTPS Inspection works by placing the Security Gateway logically between the internal client and the external HTTPS server. The gateway intercepts the TLS connection, presents a certificate to the client on behalf of the requested site, decrypts the traffic for inspection by supported blades, and then creates a separate encrypted TLS connection from the gateway to the real external server. This is a controlled man-in-the-middle inspection model using a trusted outbound CA certificate.
Option A is wrong because the gateway does not simply "monitor" the original negotiation and collect keys; modern TLS is specifically designed to prevent passive key collection. Option C is technically false because users do not insert a static key into browsers for all HTTPS sessions. Option D is fiction; HTTPS Inspection does not rely on JavaScript payloads or browser helper modules to steal or share encryption keys. The operational requirement is correct CA deployment to client trust stores so the gateway-generated certificates are trusted. Reference topics: HTTPS Inspection, outbound CA certificate, TLS interception, supported Software Blades.

by Brian at Oct 14, 2026, 11:30 PM

Limited Time Offer

15%

Off

Get Premium 156-215.82 Questions as Interactive Self Test Engine or PDF

Comments

0 Happy Clients

0 Shares

0 Demo Downloads

10 Years in Business