Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

CheckPoint 156-215.81 Exam - Topic 8 Question 13 Discussion

In SmartEvent, a correlation unit (CU) is used to do what?
C) Analyze log entries and identify events.
A) Collect security gateway logs, Index the logs and then compress the logs.
B) Receive firewall and other software blade logs in a region and forward them to the primary log server.
D) Send SAM block rules to the firewalls during a DOS attack.

CheckPoint 156-215.81 Exam - Topic 8 Question 13 Discussion

Actual exam question for CheckPoint's 156-215.81 exam
Question #: 13
Topic #: 8
[All 156-215.81 Questions]

In SmartEvent, a correlation unit (CU) is used to do what?

Show Suggested Answer Hide Answer
Suggested Answer: C

https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/CP_R80.40_LoggingAndMonitoring_AdminGuide/Topics-LMG/SmartEvent-Correlation-Unit.htm


by Bulah at Oct 28, 2022, 05:34 PM

Limited Time Offer

25%

Off

Get Premium 156-215.81 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Georgene
7 months ago
Definitely not A, that's not what C does!
upvoted 0 times
...
Kara
7 months ago
Wait, does it really do that? Sounds too good to be true!
upvoted 0 times
...
Sommer
7 months ago
I thought it was just for forwarding logs, not analyzing them.
upvoted 0 times
...
Edelmira
7 months ago
Totally agree, it's all about event correlation!
upvoted 0 times
...
Ellen
8 months ago
CU analyzes log entries and identifies events.
upvoted 0 times
...
Joanne
8 months ago
I don't think it has anything to do with sending rules during a DOS attack, so I'm pretty sure D is not the right answer.
upvoted 0 times
...
Melissa
8 months ago
I feel like the CU does something with events, but I can't recall if it's just analyzing or if it also identifies them.
upvoted 0 times
...
Brendan
8 months ago
I remember practicing a question about how logs are forwarded to the primary log server, so I might lean towards option B.
upvoted 0 times
...
Irving
8 months ago
I think the correlation unit is mainly about analyzing log entries, but I'm not completely sure if that's its only function.
upvoted 0 times
...
Christiane
8 months ago
I've got a good feeling about this one. Based on what we've covered in class, I think the most likely area to use probability distributions is option A - the uncertainty in the schedule activity durations. That's a classic application of this technique.
upvoted 0 times
...
Tammi
8 months ago
This is a good question. I'd focus on highlighting how a pilot can demonstrate immediate value and create a detailed methodology to support the practice area.
upvoted 0 times
...

Save Cancel