CheckPoint Exam 156-915.77 Topic 3 Question 4 Discussion

Actual exam question for CheckPoint's 156-915.77 exam

Question #: 4
Topic #: 3

You have selected the event Port Scan from Internal Network in SmartEvent, to detect an event when 30 port scans have occurred within 60 seconds. You also want to detect two port scans from a host within 10 seconds of each other. How would you accomplish this?

ADefine the two port-scan detections as an exception.

BYou cannot set SmartEvent to detect two port scans from a host within 10 seconds of each other.

CSelect the two port-scan detections as a sub-event.

DSelect the two port-scan detections as a new event.

Show Suggested Answer

Suggested Answer: A

by Hoa at Dec 28, 2022, 10:58 PM

Limited Time Offer

25%

Off

Get Premium 156-915.77 Questions as Interactive Web-Based Practice Test or PDF

Comments

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!