Check Point Certified Security Expert (CCSE) R81 — Question 245

What is the recommended configuration when the customer requires SmartLog indexing for 14 days and SmartEvent to keep events for 180 days?

Answer options

• A. It is not possible
• B. Use Multi-Domain Management Server
• C. Choose different setting for log storage and SmartEvent db
• D. Install Management and SmartEvent on different machines

Correct answer: C

Explanation

The correct answer is C because it allows for the necessary differentiation in settings, enabling SmartLog and SmartEvent to operate according to the specified retention periods. Options A and B are incorrect as they do not address the specific requirements, and D is not necessary when proper settings can achieve the desired outcome.