Check Point Certified Security Expert (CCSE) R81 — Question 9

You have used the SmartEvent GUI to create a custom Event policy. What is the best way to display the correlated Events generated by SmartEvent Policies?

Answer options

• A. Open SmartView Monitor and select the SmartEvent Window from the main menu.
• B. In the SmartConsole / Logs & Monitor --> open the Logs View and use type:Correlated as query filter.
• C. In the SmartConsole / Logs & Monitor -> open a new Tab and select External Apps / SmartEvent.
• D. Select the Events tab in the SmartEvent GUI or use the Events tab in the SmartView web interface.

Correct answer: B

Explanation

The correct answer is B because it specifically allows you to filter the logs to show only the correlated events, which is the desired outcome. Options A and C do not directly provide access to the correlated events, while option D involves multiple interfaces that may not focus on the specific requirement of displaying correlated events.