nerdexam
Check_Point

156-215.80 · Question #265

While in SmartView Tracker, Brady has noticed some very odd network traffic that he thinks could be an intrusion. He decides to block the traffic for 60 minutes, but cannot remember all the steps…

The correct answer is C. 1, 5, 2, 4. Blocking an intruder in SmartView Tracker requires switching to Active Mode first, then selecting the connection, invoking the block tool, and setting the timeout.

Security Gateway Troubleshooting

Question

While in SmartView Tracker, Brady has noticed some very odd network traffic that he thinks could be an intrusion. He decides to block the traffic for 60 minutes, but cannot remember all the steps. What is the correct order of steps needed to set up the block? 1) Select Active Mode tab in SmartView Tracker. 2) Select Tools > Block Intruder. 3) Select Log Viewing tab in SmartView Tracker. 4) Set Blocking Timeout value to 60 minutes. 5) Highligh connection that should be blocked.

Options

  • A1, 2, 5, 4
  • B3, 2, 5, 4
  • C1, 5, 2, 4
  • D3, 5, 2, 4

How the community answered

(43 responses)
  • A
    9% (4)
  • B
    2% (1)
  • C
    84% (36)
  • D
    5% (2)

Why each option

Blocking an intruder in SmartView Tracker requires switching to Active Mode first, then selecting the connection, invoking the block tool, and setting the timeout.

A1, 2, 5, 4

Step 2 (Tools > Block Intruder) is invoked before step 5 (highlighting the connection), but you must first select a connection before the block action can target it.

B3, 2, 5, 4

Starting on the Log Viewing tab (step 3) is incorrect because Block Intruder is not available from that tab - Active Mode is required to act on live connections.

C1, 5, 2, 4Correct

The correct sequence is: (1) select the Active Mode tab - because Block Intruder is only available in Active Mode, not Log Viewing mode; (5) highlight the specific connection to be blocked - the target must be selected before invoking the tool; (2) select Tools > Block Intruder - this opens the blocking dialog; (4) set the Blocking Timeout to 60 minutes. Active Mode is mandatory because it shows live connections that can be acted upon.

D3, 5, 2, 4

Starting on the Log Viewing tab (step 3) is incorrect for the same reason as B - Block Intruder functionality is only accessible in Active Mode.

Concept tested: SmartView Tracker Block Intruder procedure in Active Mode

Source: https://sc1.checkpoint.com/documents/R77/CP_R77_SmartCenter_AdminGuide/html_frameset.htm

Topics

#SmartView Tracker#Block Intruder#active mode#intrusion blocking

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 156-215.80 Practice