In a cloud environment, the primary graphical user interface (GUI) options for accessing the Endpoint Security Management Server are the Infinity Portal and the Web Management Console. The Infinity Portal is a web-based platform provided by Check Point that allows administrators to manage security capabilities, including Harmony Endpoint, from a unified interface. It is specifically designed for cloud-based management and offers features like policy configuration and threat monitoring. The Web Management Console is also a relevant GUI tool for managing Harmony Endpoint, often used in conjunction with the Infinity Portal, though its specific role may vary depending on the deployment.

Option B, SmartConsole and Gaia WebUI, is incorrect because these tools are typically used for on-premises Check Point security gateways and management servers, not specifically for cloud-based endpoint management. Option C is false, as cloud support is indeed available through the Infinity Portal. Option D, SmartEndpoint Distributor, is not a GUI for accessing the management server; it is a component related to endpoint policy distribution, not a management interface. Thus, the correct answer is A. Infinity Portal and Web Management Console.

Port Protection, a feature within the Media Encryption & Port Protection (MEPP) component of Check Point Harmony Endpoint, is designed toprotect activity on the ports of a client computer to help prevent data leakage. This functionality controls access to ports such as USB, Bluetooth, and others to secure data transfers and prevent unauthorized data exfiltration. TheCP_R81.20_Harmony_Endpoint_Server_AdminGuide.pdfprovides clear evidence onpage 280, under "Media Encryption & Port Protection":

"Protects data stored on the computers by encrypting removable media devices and allowing tight control over computers' ports (USB, Bluetooth, and so on)."

Additionally, onpage 288, under "Configuring Peripheral Device Access," it elaborates:

"Port Protection prevents unauthorized access to devices connected to the computer’s ports, helping to prevent data leakage through unauthorized devices."

These extracts confirm that Port Protection’s primary purpose is to safeguard data by controlling port activity, aligning withOption A. The "why" is explicitly tied to preventing data leakage, a critical security objective.

Option B ("to review logs")is incorrect; while logs may be generated as a byproduct, the primary goal is protection, not log review.

Option C ("to help unauthorized user access")contradicts the purpose of Port Protection, which is to block unauthorized access, not facilitate it.

Option D ("to monitor devices")is partially relevant but incomplete; monitoring is a means to an end, with the ultimate goal being data leakage prevention.

The Endpoint Client GUI in Check Point Harmony Endpoint provideseither automatic or manual promptingto protect removable storage media usage, depending on how the administrator configures the system. This functionality is part of the Media Encryption & Port Protection component, which allows flexible control over removable media such as USB drives. According to theCP_R81.20_Harmony_Endpoint_Server_AdminGuide.pdfonpage 282, under the section "Working with Actions in a Media Encryption & Port Protection Rule," the documentation states:

"You can configure rules to automatically encrypt media or prompt users to encrypt or access media in a protected manner."

This extract confirms that administrators can set policies to either automatically apply encryption (automatic prompting) or require user interaction (manual prompting) when removable media is detected. For example, an automatic rule might encrypt a USB drive without user intervention, while a manual rule might display a prompt in the Endpoint Client GUI asking the user to confirm encryption or access permissions. This dual capability makesOption B ("Either automatic or manual")the correct answer.

Option A ("Manual Only")is incorrect because the system supports automatic prompting, not just manual.

Option C ("Automatic Only")is incorrect because manual prompting is also an available option.

Option D ("Neither automatic nor manual")is false, as the documentation clearly describes both methods.