Check Point Certified Security Expert (CCSE) R81 — Question 164

When detected, an event can activate an Automatic Reaction. The SmartEvent administrator can create and configure one Automatic Reaction, or many, according to the needs of the system Which of the following statement is false and NOT part of possible automatic reactions:

Answer options

• A. Syslog
• B. SNMP Trap
• C. Block Source
• D. Mail

Correct answer: A

Explanation

The correct answer, A. Syslog, is false because Syslog is typically used for logging rather than as an automatic reaction. The other options, B. SNMP Trap, C. Block Source, and D. Mail, are valid actions that can be configured as automatic reactions to events.