Check Point Certified Security Expert (CCSE) R81 — Question 176

To find records in the logs that shows log records from the Application URL Filtering Software Blade where traffic was dropped, what would be the query syntax?

Answer options

• A. blade:"application control" AND action:drop
• B. blade;"application control" AND action;drop
• C. blade: application control AND action:drop
• D. (blade: application control AND action;drop)

Correct answer: A

Explanation

Option A is correct because it uses the proper syntax with a colon for key-value pairs and quotation marks for multi-word values. The other options either incorrectly use semicolons or lack the necessary quotation marks, making them invalid for the intended query.