Check Point Certified Security Expert (CCSE) R80 — Question 239

SmartEvent uses it's event policy to identity events. How can this be customized?

Answer options

• A. By modifying the firewall rulebase
• B. By creating event candidates
• C. By matching logs against exclusions
• D. By matching logs against event rules

Correct answer: D

Explanation

The correct answer is D because SmartEvent identifies events by matching logs against predefined event rules, allowing for precise event detection. Options A, B, and C do not directly relate to the customization of event identification within SmartEvent's event policy.