Check Point Certified Security Administrator (CCSA) R81.20 — Question 29

In large organizations where there are a number of managed Check Point firewalls that generate a lot of logs it is recommended to install the Log Server on a dedicated computer. Which statement is FALSE?

Answer options

• A. The dedicated Log Server must be the same version as the Security Management Server.
• B. A Log Server has a SIC certificate which allows secure communication with the SMS and Security Gateways.
• C. More than one Log Server can be installed.
• D. A dedicated SmartEvent server is required for a separate Log Server to be deployed in the SmartEvent server.

Correct answer: D

Explanation

The correct answer is D because a separate Log Server can operate independently without requiring a dedicated SmartEvent server. The other options are true; the dedicated Log Server must match the SMS version, has a SIC certificate for secure interactions, and multiple Log Servers can be installed.