Check_Point
156-215.75 · Question #287
Your boss wants you to closely monitor an employee suspected of transferring company secrets to the competition. The IT department discovered the suspect installed a WinSCP client in order to use…
The correct answer is B. Use SmartView Tracker to follow his actions by filtering log entries that feature the WinSCP source. See the full explanation below for the reasoning.
Question
Your boss wants you to closely monitor an employee suspected of transferring company secrets to the competition. The IT department discovered the suspect installed a WinSCP client in order to use encrypted communication. Which of the following methods is best to accomplish this task?
Options
- AWatch his IP in SmartView monitor by setting an alert action to any packet that matches your Rule
- BUse SmartView Tracker to follow his actions by filtering log entries that feature the WinSCP source
- CUse SmartDashboard to add a rule in the firewall rule Base that matches his IP address and those
- DSend the suspect an email with a key logging Trojan attached, to get direct information about his
How the community answered
(36 responses)- A3% (1)
- B83% (30)
- C8% (3)
- D6% (2)
Community Discussion
No community discussion yet for this question.