156-215.80 · Question #248
What is Consolidation Policy?
The correct answer is B. The specific Policy written in SmartDashboard to configure which log data is stored in the. Consolidation Policy is the SmartReporter policy that defines rules controlling which log data is selected, processed, and stored in the SmartReporter database.
Question
What is Consolidation Policy?
Options
- AThe collective name of the Security Policy, Address Translation, and IPS Policies.
- BThe specific Policy written in SmartDashboard to configure which log data is stored in the
- CThe collective name of the logs generated by SmartReporter.
- DA global Policy used to share a common enforcement policy for multiple Security Gateways.
How the community answered
(42 responses)- A7% (3)
- B88% (37)
- C2% (1)
- D2% (1)
Why each option
Consolidation Policy is the SmartReporter policy that defines rules controlling which log data is selected, processed, and stored in the SmartReporter database.
The collective name for Security Policy, Address Translation, and IPS Policies together is simply the 'Security Policy' set, not the Consolidation Policy.
The Consolidation Policy is authored in SmartDashboard's SmartReporter component and contains rules that specify which log records are retained, summarized, or discarded before being written to the reporting database. This gives administrators fine-grained control over storage consumption and report relevance.
Consolidation Policy defines rules for log storage selection - it is not itself a collection of generated log output from SmartReporter.
A policy shared across multiple Security Gateways to enforce a common rule base is called a Global Policy, not a Consolidation Policy.
Concept tested: Check Point SmartReporter Consolidation Policy definition
Source: https://sc1.checkpoint.com/documents/R77/CP_R77_SmartReporter_AdminGuide/html_frameset.htm
Topics
Community Discussion
No community discussion yet for this question.