Fill in the blank: The R80 feature ______ permits blocking specific IP addresses for a specific time period.

The correct answer is C. Suspicious Activity Monitoring. Suspicious Activity Rules Solution Suspicious Activity Rules is a utility integrated into SmartView Monitor that is used to modify access privileges upon detection of any suspicious network activity (for example, several attempts to gain unauthorized access). The detection of…

Advanced Firewall and NAT

Question

Options

ABlock Port Overflow
BLocal Interface Spoofing
CSuspicious Activity Monitoring
DAdaptive Threat Prevention

How the community answered

(30 responses)

A
3% (1)
B
10% (3)
C
83% (25)
D
3% (1)

Explanation

Suspicious Activity Rules Solution Suspicious Activity Rules is a utility integrated into SmartView Monitor that is used to modify access privileges upon detection of any suspicious network activity (for example, several attempts to gain unauthorized access). The detection of suspicious activity is based on the creation of Suspicious Activity rules. Suspicious Activity rules are Firewall rules that enable the system administrator to instantly block suspicious connections that are not restricted by the currently enforced security policy. These rules, once set (usually with an expiration date), can be applied immediately without the need to perform an Install Policy operation https://sc1.checkpoint.com/documents/R76/CP_R76_SmartViewMonitor_AdminGuide/17670.htm

Topics

#SAM#Suspicious Activity Monitoring#IP blocking#firewall

Community Discussion

No community discussion yet for this question.

Full 156-315.80 Practice