156-315.76 Exam Questions

What is the most common cause for a Quick mode packet 1 failing with the error "No Proposal Chosen" error?

Which component receives events and assigns severity levels to the events; invokes any defined automatic reactions, and adds the events to the Events Data Base?

The ______________ contains the Events Data Base.

The SmartEvent Correlation Unit:

The SmartEvent Server:

The SmartEvent Client:

The SmartEvent Correlation Unit:

The SmartEvent Correlation Unit:

The SmartEvent Server:

What are the 3 main components of the SmartEvent Software Blade?

How many Events can be shown at one time in the Event preview pane?

You are reviewing computer information collected in ClientInfo. You can NOT:

Which of the following is NOT a SmartEvent Permission Profile type?

What is the SmartEvent Correlation Unit's function?

What is the SmartEvent Analyzer's function?

What is the SmartEvent Client's function?

A tracked SmartEvent Candidate in a Candidate Pool becomes an Event. What does NOT happen in the Analyzer Server?

How many pre-defined exclusions are included by default in SmartEvent R76 as part of the product installation?

What is the purpose of the pre-defined exclusions included with SmartEvent R76?

What is the benefit to running SmartEvent in Learning Mode?

______________ is NOT an SmartEvent event-triggered Automatic Reaction.

For best performance in Event Correlation, you should use:

What access level cannot be assigned to an Administrator in SmartEvent?

_______________ manages Standard Reports and allows the administrator to specify automatic uploads of reports to a central FTP server.

_____________ generates a SmartEvent Report from its SQL database.

Which SmartReporter report type is generated from the SmartView Monitor history file?

Which Check Point product is used to create and save changes to a Log Consolidation Policy?

Which Check Point product implements a Consolidation Policy?

You have selected the event Port Scan from Internal Network in SmartEvent, to detect an event when 30 port scans have occurred within 60 seconds. You also want to detect two port s...

When do modifications to the Event Policy take effect?

To back up all events stored in the SmartEvent Server, you should back up the contents of which folder(s)?

To clean the system of all events, you should delete the files in which folder(s)?

What SmartConsole application allows you to change the Log Consolidation Policy?

Where is it necessary to configure historical records in SmartView Monitor to generate Express reports in SmartReporter?

In a UNIX environment, SmartReporter Data Base settings could be modified in:

In a Windows environment, SmartReporter Data Base settings could be modified in:

Which specific R76 GUI would you use to view the length of time a TCP connection was open?

SmartReporter reports can be used to analyze data from a penetration-testing regimen in all of the following examples, EXCEPT:

What is the best tool to produce a report which represents historical system information?

If Jack was concerned about the number of log entries he would receive in the SmartReporter system, which policy would he need to modify?

Your company has the requirement that SmartEvent reports should show a detailed and accurate view of network activity but also performance should be guaranteed. Which actions shoul...

To help organize events, SmartReporter uses filtered queries. Which of the following is NOT an SmartEvent event property you can query?

When migrating the SmartEvent data base from one server to another, the first step is to back up the files on the original server. Which of the following commands should you run to...

When migrating the SmartEvent data base from one server to another, the last step is to save the files on the new server. Which of the following commands should you run to save the...

How could you compare the Fingerprint shown to the Fingerprint on the server?

Which file defines the fields for each object used in the file objects.C (color, num/string, default value...)?

Which procedure creates a new administrator in SmartWorkflow?

When you check Web Server in a host-node object, what happens to the host?

Which external user authentication protocols are supported in SSL VPN?

Which of the following commands can be used to stop Management portal services?