Check Point Certified Security Administrator (CCSA) R81 — Question 209

You are the Check Point administrator for Alpha Corp. You received a call that one of the users is unable to browse the Internet on their new tablet which is connected to the company wireless, which goes through a Check Point Gateway. How would you review the logs to see what is blocking this traffic?

Answer options

• A. Open SmartEvent to see why they are being blocked.
• B. Open SmartMonitor and connect remotely to the wireless controller
• C. From SmartConsole, go to the Log & Monitor tab and filter for the IP address of the tablet.
• D. Open SmartUpdate and review the logs tab.

Correct answer: C

Explanation

The correct option, C, allows you to directly access the logs related to the specific IP address of the tablet, making it the most efficient way to identify blocking issues. Option A, while useful for broader investigations, does not target the specific user's issue. Option B focuses on the wireless controller, which may not directly reveal the Check Point logs. Option D involves SmartUpdate, which is not intended for log analysis.