Check Point Certified Security Expert (CCSE) R81.20 — Question 19

You have used the SmartEvent GUI to create a custom Event policy. What is the best way to display the correlated Events generated by SmartEvent Policies?

Answer options

• A. In the SmartConsole / Logs & Monitor –> open the Logs View and use type:Correlated as query filter.
• B. Select the Events tab in the SmartEvent GUI or use the Events tab in the SmartView web interface.
• C. Open SmartView Monitor and select the SmartEvent Window from the main menu.
• D. In the SmartConsole / Logs & Monitor –> open a new Tab and select External Apps / SmartEvent.

Correct answer: A

Explanation

The correct answer is A because using the Logs View with the type:Correlated filter directly displays the correlated events generated by the policies. Option B does not provide a specific way to filter correlated events, while C and D do not focus on the Logs View, which is necessary for this task.