Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

CheckPoint 156-215.81 Exam - Topic 8 Question 13 Discussion

In SmartEvent, a correlation unit (CU) is used to do what?
C) Analyze log entries and identify events.
A) Collect security gateway logs, Index the logs and then compress the logs.
B) Receive firewall and other software blade logs in a region and forward them to the primary log server.
D) Send SAM block rules to the firewalls during a DOS attack.

CheckPoint 156-215.81 Exam - Topic 8 Question 13 Discussion

Actual exam question for CheckPoint's 156-215.81 exam
Question #: 13
Topic #: 8
[All 156-215.81 Questions]

In SmartEvent, a correlation unit (CU) is used to do what?

Show Suggested Answer Hide Answer
Suggested Answer: C

https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/CP_R80.40_LoggingAndMonitoring_AdminGuide/Topics-LMG/SmartEvent-Correlation-Unit.htm


by Bulah at Oct 28, 2022, 05:34 PM

Limited Time Offer

25%

Off

Get Premium 156-215.81 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Georgene
10 months ago
Definitely not A, that's not what C does!
upvoted 0 times
...
Kara
10 months ago
Wait, does it really do that? Sounds too good to be true!
upvoted 0 times
...
Sommer
10 months ago
I thought it was just for forwarding logs, not analyzing them.
upvoted 0 times
...
Edelmira
10 months ago
Totally agree, it's all about event correlation!
upvoted 0 times
...
Ellen
11 months ago
CU analyzes log entries and identifies events.
upvoted 0 times
...
Joanne
11 months ago
I don't think it has anything to do with sending rules during a DOS attack, so I'm pretty sure D is not the right answer.
upvoted 0 times
...
Melissa
11 months ago
I feel like the CU does something with events, but I can't recall if it's just analyzing or if it also identifies them.
upvoted 0 times
...
Brendan
11 months ago
I remember practicing a question about how logs are forwarded to the primary log server, so I might lean towards option B.
upvoted 0 times
...
Irving
11 months ago
I think the correlation unit is mainly about analyzing log entries, but I'm not completely sure if that's its only function.
upvoted 0 times
...
Christiane
11 months ago
I've got a good feeling about this one. Based on what we've covered in class, I think the most likely area to use probability distributions is option A - the uncertainty in the schedule activity durations. That's a classic application of this technique.
upvoted 0 times
...
Tammi
11 months ago
This is a good question. I'd focus on highlighting how a pilot can demonstrate immediate value and create a detailed methodology to support the practice area.
upvoted 0 times
...

Save Cancel