The Endpoint Client GUI in Check Point Harmony Endpoint provideseither automatic or manual promptingto protect removable storage media usage, depending on how the administrator configures the system. This functionality is part of the Media Encryption & Port Protection component, which allows flexible control over removable media such as USB drives. According to theCP_R81.
20_Harmony_Endpoint_Server_AdminGuide.pdfonpage 282, under the section "Working with Actions in a Media Encryption & Port Protection Rule," the documentation states:
"You can configure rules to automatically encrypt media or prompt users to encrypt or access media in a protected manner." This extract confirms that administrators can set policies to either automatically apply encryption (automatic prompting) or require user interaction (manual prompting) when removable media is detected. For example, an automatic rule might encrypt a USB drive without user intervention, while a manual rule might display a prompt in the Endpoint Client GUI asking the user to confirm encryption or access permissions. This dual capability makesOption B ("Either automatic or manual")the correct answer.
* Option A ("Manual Only")is incorrect because the system supports automatic prompting, not just manual.
* Option C ("Automatic Only")is incorrect because manual prompting is also an available option.
* Option D ("Neither automatic nor manual")is false, as the documentation clearly describes both methods.
References:
CP_R81.20_Harmony_Endpoint_Server_AdminGuide.pdf, Page 282: "Working with Actions in a Media Encryption & Port Protection Rule" (describes the ability to configure automatic encryption or user prompts for removable media).