Check Point Certified Security Administrator (CCSA) R81.20 — Question 57

After a new Log Server is added to the environment and the SIC trust has been established with the SMS what will the gateways do?

Answer options

• A. Gateways will send new firewall logs to the new Log Server as soon as the SIC trust is set up between the SMS and the new Log Server.
• B. Logs are not automatically forwarded to a new Log Server. SmartConsole must be used to manually configure each gateway to send its logs to the server.
• C. The firewalls will detect the new Log Server after the next policy install and redirect the new logs to the new Log Server.
• D. The gateways can only send logs to an SMS and cannot send logs to a Log Server. Log Servers are proprietary log archive servers.

Correct answer: B

Explanation

The correct answer is B because logs do not automatically get forwarded to a new Log Server; each gateway requires manual configuration through SmartConsole to direct logs to the new server. Options A and C are incorrect as they imply automatic log forwarding, which does not occur. Option D mistakenly claims that gateways cannot send logs to a Log Server, which is not true; they just need to be configured to do so.