For best performance in Event Correlation, you should use:
For best performance in Event Correlation, you should use:
What access level cannot be assigned to an Administrator in SmartEvent?
What access level cannot be assigned to an Administrator in SmartEvent?
_______________ manages Standard Reports and allows the administrator to specify automatic uploads of reports
_______________ manages Standard Reports and allows the administrator to specify automatic
uploads of reports to a central FTP server.
_____________ generates a SmartEvent Report from its SQL database.
_____________ generates a SmartEvent Report from its SQL database.
Which SmartReporter report type is generated from the SmartView Monitor history file?
Which SmartReporter report type is generated from the SmartView Monitor history file?
Which Check Point product is used to create and save changes to a Log Consolidation Policy?
Which Check Point product is used to create and save changes to a Log Consolidation Policy?
Which Check Point product implements a Consolidation Policy?
Which Check Point product implements a Consolidation Policy?
How would you accomplish this?
You have selected the event Port Scan from Internal Network in SmartEvent, to detect an event
when 30 port scans have occurred within 60 seconds. You also want to detect two port scans from
a host within 10 seconds of each other. How would you accomplish this?
When do modifications to the Event Policy take effect?
When do modifications to the Event Policy take effect?
which folder(s)?
To back up all events stored in the SmartEvent Server, you should back up the contents of which
folder(s)?