nerdexam
Check_Point

156-915.77 · Question #201

(Topic 16) You have selected the event Port Scan from Internal Network in SmartEvent, to detect an event when 30 port scans have occurred within 60 seconds. You also want to detect two port scans…

The correct answer is A. Define the two port-scan detections as an exception. See the full explanation below for the reasoning.

Question

  • (Topic 16)

You have selected the event Port Scan from Internal Network in SmartEvent, to detect an event when 30 port scans have occurred within 60 seconds. You also want to detect two port scans from a host within 10 seconds of each other. How would you accomplish this?

Options

  • ADefine the two port-scan detections as an exception.
  • BYou cannot set SmartEvent to detect two port scans from a host within 10 seconds of
  • CSelect the two port-scan detections as a sub-event.
  • DSelect the two port-scan detections as a new event.

How the community answered

(60 responses)
  • A
    83% (50)
  • B
    8% (5)
  • C
    3% (2)
  • D
    5% (3)

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 156-915.77 Practice