Check_Point
156-215.75 · Question #254
You find a suspicious connection from a problematic host. You decide that you want to block everything from that whole network, not just the problematic host. You want to block this for an hour…
The correct answer is B. Create a Suspicious Activity Rule in SmartView Monitor. See the full explanation below for the reasoning.
Question
You find a suspicious connection from a problematic host. You decide that you want to block everything from that whole network, not just the problematic host. You want to block this for an hour while you investigate further, but you do not want to add any rules to the Rule Base. How do you achieve this?
Options
- AAdd a "temporary" rule using SmartDashboard and select hide rule.
- BCreate a Suspicious Activity Rule in SmartView Monitor
- CUse dbedit to script the addition of a rule directly into the Rule Bases_5_0. fws configuration file.
- DSelect block intruder from the tools menu in SmartView Tracker.
How the community answered
(20 responses)- A5% (1)
- B75% (15)
- C5% (1)
- D15% (3)
Community Discussion
No community discussion yet for this question.