Check Point Certified Security Administrator (CCSA) R80 — Question 301

What must a Security Administrator do to comply with a management requirement to log all traffic accepted through the perimeter Security Gateway?

Answer options

• A. In Global Properties > Reporting Tools check the box Enable tracking all rules (including rules marked as None in the Track column). Send these logs to a secondary log server for a complete logging history. Use your normal log server for standard logging for troubleshooting.
• B. Install the View Implicit Rules package using SmartUpdate.
• C. Define two log servers on the R77 Gateway object. Lof Implied Rules on the first log server. Enable Log Rule Base on the second log server. Use SmartReporter to merge the two log server records into the same database for HIPPA log audits.
• D. Check the Log Implied Rules Globally box on the R77 Gateway object.

Correct answer: A

Explanation

Option A is correct because it directly addresses the requirement to log all accepted traffic by enabling tracking for all rules. The other options do not provide a comprehensive solution for logging all traffic; they focus on different aspects of rule management or logging that do not fulfill the management requirement.