Check Point Certified Multi-Domain Security Management Specialist (CCMS) — Question 24

You found out that $FWDIR/log/fw.log is constantly growing in size at a Security Gateway, what is the reason?

Answer options

• A. TCP state logging is enabled
• B. It’s not a problem the gateway is logging connections and also sessions
• C. fw.log can grow when GW does not have space in logging directory
• D. The GW is logging locally

Correct answer: D

Explanation

The correct answer is D because when the gateway logs locally, it can lead to an accumulation of log data without any external management. Option A is incorrect as TCP state logging does not directly cause log file growth. Option B misunderstands the nature of logging; while logging is necessary, excessive growth can indicate a problem. Option C, while true, does not specifically relate to the cause of continuous growth as local logging does.