CheckPoint Exam Questions

How do you block the connection in real time and verify the connection is successfully blocked?

You receive an alert indicating a suspicious FTP connection is trying to connect to one of your
internal hosts. How do you block the connection in real time and verify the connection is successfully
blocked?

A.
Highlight the suspicious connection in Smart View Tracker > Active mode. Block the connection
using the Tools > Block Intruder menu. Use the Active mode to confirm that the suspicious
connection does not reappear.

B.
Highlight the suspicious connection in Smart View Tracker > Log mode. Block the connection using
Tools > Block Intruder menu. Use Log mode to confirm that the suspicious connection does not
reappear.

C.
Highlight the suspicious connection in Smart View Tracker > Active mode. Block the connection
using Tools > Block Intruder menu. Use Active mode to confirm that the suspicious connection is
dropped.

D.
Highlight the suspicious connection in Smart View Tracker > Log mode. Block the connection using
Tools > Block Intruder menu. Use the Log mode to confirm that the suspicious connection is
dropped.