Check Point Certified Security Expert (CCSE) R81.20 — Question 21

When detected, an event can activate an Automatic Reaction. The SmartEvent administrator can create and configure one Automatic Reaction, or many, according to the needs of the system. Which of the following statement is false and NOT part of possible automatic reactions:

Answer options

• A. Syslog
• B. SNMP Trap
• C. Mail
• D. Block Source

Correct answer: A

Explanation

The correct answer is A, as Syslog is not classified as an Automatic Reaction in this context. SNMP Trap, Mail, and Block Source are all valid types of Automatic Reactions that can be configured by a SmartEvent administrator.