nerdexam
Check_Point

156-215.80 · Question #426

How can the changes made by an administrator before publishing the session be seen by a superuser administrator?

The correct answer is C. From the SmartView Tracker audit log. A superuser administrator can review another administrator's unpublished session changes through the SmartView Tracker audit log, which records administrative actions in real time.

Monitoring and Reporting

Question

How can the changes made by an administrator before publishing the session be seen by a superuser administrator?

Options

  • ABy impersonating the administrator with the `Login as...' option
  • BThey cannot be seen
  • CFrom the SmartView Tracker audit log
  • DFrom Manage and Settings > Sessions, right click on the session and click `View Changes...'

How the community answered

(29 responses)
  • A
    3% (1)
  • B
    14% (4)
  • C
    79% (23)
  • D
    3% (1)

Why each option

A superuser administrator can review another administrator's unpublished session changes through the SmartView Tracker audit log, which records administrative actions in real time.

ABy impersonating the administrator with the `Login as...' option

The 'Login as...' impersonation option allows an administrator to open a session as another user but does not specifically expose that user's unpublished in-progress changes.

BThey cannot be seen

Check Point's architecture does allow superuser administrators to observe other administrators' session activity, so stating changes cannot be seen is incorrect.

CFrom the SmartView Tracker audit logCorrect

SmartView Tracker captures an audit trail of all administrator actions, including changes made within an active but unpublished session, giving superuser administrators visibility into in-progress work. This audit capability is a key separation-of-duties control in Check Point's multi-administrator management model, allowing oversight without requiring the session to be published first.

DFrom Manage and Settings > Sessions, right click on the session and click `View Changes...'

The 'View Changes...' option in Manage and Settings > Sessions is not a documented SmartConsole feature for viewing another administrator's unpublished changes.

Concept tested: Check Point SmartView Tracker audit of unpublished admin sessions

Source: https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_SecurityManagement_AdminGuide/Topics-SECRM/Working-with-Sessions.htm

Topics

#session management#SmartView Tracker#audit log#administrator changes

Community Discussion

No community discussion yet for this question.

Full 156-215.80 Practice