The default layers that are included when creating a new policy layer are Access Control, Threat Prevention, and HTTPS Inspection. Access Control is the layer that defines the basic firewall rules. Threat Prevention is the layer that enables the protection against various types of attacks, such as IPS, Anti-Virus, Anti-Bot, etc.HTTPS Inspection is the layer that allows the inspection of encrypted traffic1. The other options are not the default layers that are included when creating a new policy layer.

Application information is included in the "Extended Log" tracking option, but is not included in the "Log" tracking option4.The "Extended Log" option provides additional information about the application, such as name, category, risk, and technology4. LOGGINGAND MONITORING R80

The correct answer is D. Categorization Mode in HTTPS-related handling allows the gateway to make a category decision using information available before full decryption, such as the destination domain, SNI/certificate attributes, and reputation/category lookup. The purpose is classification, not full content inspection. Option A is incomplete because trusted-site bypass is handled with bypass rules, bypass lists, or policy exceptions, not by Categorization Mode alone. Option B is wrong because categorization does not mean decrypting all HTTPS traffic by default. Option C is also wrong because the mode is not a blanket block action against encrypted traffic. This distinction matters because Application Control and URL Filtering frequently need to decide whether a site should be allowed, blocked, or bypassed before content is inspected. Full HTTPS Inspection decrypts traffic for supported blades, whereas categorization can classify traffic based on metadata and certificate/domain details. Reference topics:
HTTPS Inspection, URL Filtering categorization, certificate/domain-based HTTPS handling, encrypted traffic policy decisions.

The Check Point software blade that provides Application Security and identity control is Application Control3.Application Control enables network administrators to identify, allow, block, or limit usage of thousands of applications and millions of websites3. Therefore, the correct answer is D.Application Control

According to the Check Point R81.10 SmartConsole for Windows1, to restore a backup, you need to supply the following data: Server, Protocol, Username, Password, and Path. The Server is the IP address or hostname of the Security Management Server. The Protocol is either SCP or SFTP. The Username and Password are the credentials for the Security Management Server. The Path is the location of the backup file on the Security Management Server. Check Point R81.10 SmartConsole for Windows