What is the benefit to running Smart Event in Learning Mode?
What is the benefit to running Smart Event in Learning Mode?
______________ is NOT an Smart Event event-triggered Automatic Reaction.
______________ is NOT an Smart Event event-triggered Automatic Reaction.
For best performance in Event Correlation, you should use:
For best performance in Event Correlation, you should use:
What access level cannot be assigned to an Administrator in Smart Event?
What access level cannot be assigned to an Administrator in Smart Event?
_______________ manages Standard Reports and allows the administrator to specify automatic uploads of reports
_______________ manages Standard Reports and allows the administrator to specify automatic
uploads of reports to a central FTP server.
_____________ generates a Smart Event Report from its SQL database.
_____________ generates a Smart Event Report from its SQL database.
Which Smart Reporter report type is generated from the Smart View Monitor history file?
Which Smart Reporter report type is generated from the Smart View Monitor history file?
Which Check Point product is used to create and save changes to a Log Consolidation Policy?
Which Check Point product is used to create and save changes to a Log Consolidation Policy?
Which Check Point product implements a Consolidation Policy?
Which Check Point product implements a Consolidation Policy?
How would you accomplish this?
You have selected the event Port Scan from Internal Network in Smart Event, to detect an event
when 30 port scans have occurred within 60 seconds. You also want to detect two port scans from a
host within 10 seconds of each other. How would you accomplish this?