Check Point Certified Security Administrator (CCSA) R80 — Question 78

You are the Security Administrator for MegaCorp. In order to see how efficient your firewall Rule Base is, you would like to see how many often the particular rules match. Where can you see it? Give the BEST answer.

Answer options

• A. In the SmartView Tracker, if you activate the column Matching Rate.
• B. In SmartReporter, in the section Firewall Blade ג€" Activity > Network Activity with information concerning Top Matched Logged Rules.
• C. SmartReporter provides this information in the section Firewall Blade ג€" Security > Rule Base Analysis with information concerning Top Matched Logged Rules.
• D. It is not possible to see it directly. You can open SmartDashboard and select UserDefined in the Track column. Afterwards, you need to create your own program with an external counter.

Correct answer: C

Explanation

The correct answer is C because SmartReporter provides a dedicated section for analyzing the Rule Base, specifically showing the top matched logged rules, which is essential for assessing efficiency. Option A does not provide the specific analysis required, while B, although informative, does not focus on Rule Base analysis. Option D suggests a convoluted method that is unnecessary when the information is readily available in SmartReporter.