Which two of these Check Point Protocols are used by _____ ?

ELA (Event Logging API) is used by applications to send events into the Check Point logging system, not to read logs; CPD handles inter-process communication between Check Point modules, not log export.

FWD (FireWall Daemon) is the core Check Point process that handles log forwarding between the gateway and the Log Server. LEA (Log Export API) is the OPSEC protocol that allows authorized third-party and OPSEC-certified applications to read and retrieve log records from the Check Point Log Server in real time.

CPLOG is an internal Check Point protocol for log transport between Check Point components, not the OPSEC API exposed for third-party log reading.

ELA is for writing events to the log server, and CPLOG is an internal log transport protocol; neither is the correct protocol pair for OPSEC-based log reading.