Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

CheckPoint Exam 156-315.80 Topic 7 Question 84 Discussion

Actual exam question for CheckPoint's 156-315.80 exam
Question #: 84
Topic #: 7
[All 156-315.80 Questions]

During inspection of your Threat Prevention logs you find four different computers having one event each with a Critical Severity. Which of those hosts should you try to remediate first?

Show Suggested Answer Hide Answer
Suggested Answer: D

Contribute your Thoughts:

Tish
3 days ago
I'm gonna have to go with A) Host having a Critical event found by Threat Emulation. Gotta stay one step ahead of those threats, am I right?
upvoted 0 times
...
Pearly
4 days ago
D) Host having a Critical event found by Anti-Bot is the obvious choice. Can't have those bots taking over the network, now can we?
upvoted 0 times
...
Thurman
6 days ago
Hmm, I think I'd go with C) Host having a Critical event found by Antivirus. Gotta take care of those nasty viruses first, you know?
upvoted 0 times
...
Celestina
27 days ago
I disagree, I believe we should focus on the host with Critical event found by IPS as it may indicate an active attack.
upvoted 0 times
...
Mignon
1 months ago
B) Host having a Critical event found by IPS is the way to go. That's the one that could be actively stopping attacks, right?
upvoted 0 times
Selene
2 days ago
I agree, focusing on the host with a Critical event found by IPS is the best choice for immediate action.
upvoted 0 times
...
Justine
9 days ago
Yes, you're right. IPS is designed to actively block attacks, so that host should be remediated first.
upvoted 0 times
...
...
Dannette
1 months ago
I agree with Florencia, Threat Emulation is designed to catch advanced threats so it's important to address that first.
upvoted 0 times
...
Florencia
1 months ago
I think we should remediate the host with Critical event found by Threat Emulation first.
upvoted 0 times
...

Save Cancel
a