What function receives the AD log event information?

The correct answer is A. ADLOG. ADLOG is the dedicated Check Point function that receives and processes Active Directory log event information. It monitors the Windows Security Event Log on domain controllers, collecting user login events to map identities (usernames) to IP addresses - a core function of…

Troubleshoot R81.20 Security Gateway Issues

Question

Options

AADLOG
BPEP
CCPD
DFWD

How the community answered

(20 responses)

A
95% (19)
C
5% (1)

Explanation

ADLOG is the dedicated Check Point function that receives and processes Active Directory log event information. It monitors the Windows Security Event Log on domain controllers, collecting user login events to map identities (usernames) to IP addresses - a core function of Check Point Identity Awareness.

Why the distractors are wrong:

B. PEP (Policy Enforcement Point) enforces security policy on traffic but does not handle AD log ingestion.
C. CPD (Check Point Daemon) is a core infrastructure daemon managing inter-process communication, not AD event collection.
D. FWD (FireWall Daemon) handles security policy enforcement and logging forwarding, not AD event reception.

Memory tip: Think of ADLOG as "AD + LOG" - it literally logs Active Directory events. The name directly describes its job, making it the easiest answer to eliminate from the distractors, which are all general-purpose Check Point processes with broader responsibilities.

Topics

#Active Directory Logging#Log Event Processing#Gateway Components#ADLOG Function

Community Discussion

No community discussion yet for this question.

Full 156-587 Practice