Exam 156-536 topic 1 question 58 discussion

In Unauthenticated mode, access is allowed to users or hosts without requiring them to authenticate through AD, Captive Portal, or Identity Awareness mechanisms. Instead, identity information (like IP address and username) is obtained from external sources (for example, Identity Collector, AD Query, or Session Directory), and the connection is allowed based on that identity mapping. It’s considered “unauthenticated” because no explicit user authentication (such as password or token) occurs! "identified" is not equal to "verified"

Unauthenticated mode - Client computers and the users on those computers are not authenticated when they connect to the Endpoint Security Management ServerClosedDedicated Check Point server that runs Check Point software to manage the objects and policies in a Check Point environment within a single management Domain. Synonym: Single-Domain Security Management Server.. They are trusted "by name". This operation mode is recommended for evaluation purposes only. https://sc1.checkpoint.com/documents/Infinity_Portal/WebAdminGuides/EN/Harmony-Endpoint-Admin-Guide/Topics-HEP/Active-Directory-Authentication.htm

I think answer C is a better fit. Unauthenticated mode is part of the Active directory Authentication in the endpoint solution. Endpoint Security Active Directory Authentication When an Endpoint Security client connects to the Endpoint Security Management, an authentication process identifies the endpoint client and the user currently working on that computer. The Endpoint Security system can function in these authentication modes: Unauthenticated mode - Client computers and the users on those computers are not authenticated when they connect to the Endpoint Security Management. They are trusted "by name". This operation mode is recommended for evaluation purposes only. Strong Authentication mode - Client computers and the users on those computers are authenticated with the Endpoint Security Management when they connect to the Endpoint Security Management Server. The authentication is done by the Active Directory server using the industry-standard Kerberos protocol. This option is only available for endpoints that are part of Active Directory.