Check Point Certified Security Administrator (CCSA) R81.20 — Question 88

You are the Check Point administrator for Alpha Corp. You received a call that one of the users is unable to browse the Internet on their new tablet which is connected to the company wireless, which goes through a Check Point Gateway. How would you review the logs to see what is blocking this traffic?

Answer options

• A. Open SmartEvent to see why they are being blocked.
• B. From SmartConsole, go to the Log & Monitor tab and filter for the IP address of the tablet.
• C. Open SmartMonitor and connect remotely to the wireless controller.
• D. Open SmartUpdate and review the logs tab.

Correct answer: B

Explanation

The correct answer is B because using SmartConsole's Log & Monitor tab allows you to filter logs specifically by the IP address of the affected tablet, making it straightforward to identify any traffic blocks. Option A is incorrect as SmartEvent is more for event correlation rather than direct log analysis. Option C does not provide access to the necessary logs for troubleshooting, and Option D is not relevant since SmartUpdate is intended for software updates, not log monitoring.