156-215.80 · Question #308
In SmartEvent, what are the different types of automatic reactions that the administrator can configure?
The correct answer is A. Mail, Block Source, Block Event Activity, External Script, SNMP Trap. Check Point SmartEvent supports exactly five automatic reaction types: Mail, Block Source, Block Event Activity, External Script, and SNMP Trap.
Question
In SmartEvent, what are the different types of automatic reactions that the administrator can configure?
Options
- AMail, Block Source, Block Event Activity, External Script, SNMP Trap
- BMail, Block Source, Block Destination, Block Services, SNMP Trap
- CMail, Block Source, Block Destination, External Script, SNMP Trap
- DMail, Block Source, Block Event Activity, Packet Capture, SNMP Trap
How the community answered
(48 responses)- A94% (45)
- B4% (2)
- D2% (1)
Why each option
Check Point SmartEvent supports exactly five automatic reaction types: Mail, Block Source, Block Event Activity, External Script, and SNMP Trap.
The five automatic reactions in SmartEvent are Mail (email notification), Block Source (block the originating IP), Block Event Activity (block the specific correlated event pattern), External Script (execute a custom script), and SNMP Trap (send an SNMP notification to a management system). Answer A is the only option that correctly pairs 'Block Event Activity' with 'External Script,' which are both legitimate reaction types in the SmartEvent framework.
'Block Destination' and 'Block Services' are not valid SmartEvent automatic reaction types - the correct options are 'Block Event Activity' and 'External Script,' which are absent from this choice.
'Block Destination' is not a valid SmartEvent reaction type - the correct reaction is 'Block Event Activity,' making this choice incorrect despite including 'External Script.'
'Packet Capture' is not one of the five SmartEvent automatic reaction types - 'External Script' is the correct option that belongs in that position.
Concept tested: SmartEvent automatic reaction types and configuration
Source: https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_SmartEvent_AdminGuide/default.htm
Topics
Community Discussion
No community discussion yet for this question.