CheckPoint Exam 156-315.80 Topic 7 Question 84 Discussion

Actual exam question for CheckPoint's 156-315.80 exam

Question #: 84
Topic #: 7

During inspection of your Threat Prevention logs you find four different computers having one event each with a Critical Severity. Which of those hosts should you try to remediate first?

AHost having a Critical event found by Threat Emulation

BHost having a Critical event found by IPS

CHost having a Critical event found by Antivirus

DHost having a Critical event found by Anti-Bot

Show Suggested Answer

Suggested Answer: D

by Dong at Apr 08, 2025, 11:27 PM

Limited Time Offer

25%

Off

Get Premium 156-315.80 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Isaiah

1 months ago

Wait, is there an option for 'all of the above'? We don't want any of those critical Isaiahnts hanging around, do we?

upvoted 0 times

Shonda

7 days ago

B) Host having a Critical event found by IPS

upvoted 0 times

...

Anabel

11 days ago

A) Host having a Critical event found by Threat Emulation

upvoted 0 times

...

Tish

1 months ago

I'm gonna have to go with A) Host having a Critical event found by Threat Emulation. Gotta stay one step ahead of those threats, am I right?

upvoted 0 times

...

Pearly

1 months ago

D) Host having a Critical event found by Anti-Bot is the obvious choice. Can't have those bots taking over the network, now can we?

upvoted 0 times

...

Thurman

1 months ago

Hmm, I think I'd go with C) Host having a Critical event found by Antivirus. Gotta take care of those nasty viruses first, you know?

upvoted 0 times

Ethan

4 days ago

I think focusing on the critical event found by Antivirus is the best choice for now.

upvoted 0 times

...

Tomas

7 days ago

But what about the other options? Do you think they are not as important?

upvoted 0 times

...

Stevie

13 days ago

I agree, viruses can cause a lot of damage.

upvoted 0 times

...

Whitney

20 days ago

I agree, viruses can cause a lot of damage. Antivirus should be top priority.

upvoted 0 times

...

Celestina

2 months ago

I disagree, I believe we should focus on the host with Critical event found by IPS as it may indicate an active attack.

upvoted 0 times

...

Mignon

2 months ago

B) Host having a Critical event found by IPS is the way to go. That's the one that could be actively stopping attacks, right?

upvoted 0 times

Selene

1 months ago

I agree, focusing on the host with a Critical event found by IPS is the best choice for immediate action.

upvoted 0 times

...

Justine

1 months ago

Yes, you're right. IPS is designed to actively block attacks, so that host should be remediated first.

upvoted 0 times

...

Dannette

2 months ago

I agree with Florencia, Threat Emulation is designed to catch advanced threats so it's important to address that first.

upvoted 0 times

...

Florencia

3 months ago

I think we should remediate the host with Critical event found by Threat Emulation first.

upvoted 0 times

...