Check Point Certified Security Administrator (CCSA) R80 — Question 355

What SmartEvent component creates events?

Answer options

• A. Consolidation Policy
• B. Correlation Unit
• C. SmartEvent Policy
• D. SmartEvent GUI

Correct answer: B

Explanation

The correct answer is B, the Correlation Unit, which is specifically designed to analyze logs and create events based on predefined rules. The other options, while related to SmartEvent, do not have the primary function of creating events; the Consolidation Policy manages data, the SmartEvent Policy defines how events are processed, and the SmartEvent GUI is the interface for interaction.