nerdexam
Check_Point

156-215.80 · Question #167

Which SmartConsole component can Administrators use to track changes to the Rule Base?

The correct answer is D. SmartView Tracker. SmartView Tracker is the SmartConsole component that provides an audit trail of administrator actions, including all changes made to the Security Policy Rule Base.

Monitoring and Reporting

Question

Which SmartConsole component can Administrators use to track changes to the Rule Base?

Options

  • ASmartView Monitor
  • BSmartReporter
  • CWebUI
  • DSmartView Tracker

How the community answered

(43 responses)
  • B
    5% (2)
  • C
    2% (1)
  • D
    93% (40)

Why each option

SmartView Tracker is the SmartConsole component that provides an audit trail of administrator actions, including all changes made to the Security Policy Rule Base.

ASmartView Monitor

SmartView Monitor is used for real-time monitoring of gateway performance, traffic statistics, and active connections - not for auditing policy changes.

BSmartReporter

SmartReporter generates scheduled or on-demand statistical reports about network traffic and security events, but does not provide an audit trail of Rule Base edits.

CWebUI

WebUI (Gaia Portal) is the browser-based interface for OS-level configuration of the gateway or management server and has no visibility into SmartConsole Rule Base changes.

DSmartView TrackerCorrect

SmartView Tracker records and displays detailed audit log entries for every administrative action performed in SmartConsole, including additions, deletions, and modifications to Rule Base rules. It allows administrators to see who made a change, what was changed, and when it occurred, making it the correct tool for tracking Rule Base changes.

Concept tested: SmartView Tracker for Rule Base audit logging

Source: https://sc1.checkpoint.com/documents/R81/CP_R81_LoggingAndMonitoring_AdminGuide/html_frameset.htm

Topics

#SmartView Tracker#rule base changes#audit trail#SmartConsole

Community Discussion

No community discussion yet for this question.

Full 156-215.80 Practice