Check_Point
156-915.76 · Question #271
156-915.76 Question #271: Real Exam Question with Answer & Explanation
Sign in or unlock 156-915.76 to reveal the answer and full explanation for question #271. The question stem and answer options stay visible for context.
Question
You have selected the event "port scan from internal network in Eventia Analyzer", to detect an event when 30 ports have occurred when 60 seconds. You want to detect two ports scans from a host within 10 seconds of each other. How would you accomplish this?
Options
- AYou cannot set Eventia Analyzer to detect two port scans within 10 seconds of each other.
- BSelect the two port-scan detections as a new event.
- CSelect the two port-scan detections as a sub event.
- DSelect the two port-scan detections as an exception.
Unlock 156-915.76 to see the answer
You've previewed enough free 156-915.76 questions. Unlock 156-915.76 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.