Answer = C
To help SmartEvent determine whether events originated internally or externally, the internal
network must be defined in the initial settings. There are four options to calculate the traffic
direction:
• Incoming — All the sources are outside the network and all destinations are inside.
• Outgoing — All sources are inside the network and all destinations are outside.
• Internal — Sources and destinations are all inside the network.
• Other — A mixture of and internal and external values makes the result indeterminate.
The correct answer is C.
Defining the Internal Network
To help SmartEvent conclude if events originated internally or externally, you must define the Internal
Network. These are the options to calculate the traffic direction:
- Incoming - All the sources are external to the network and all destinations are internal.
- Outgoing - All sources are in the network and all destinations are external.
- Internal - Sources and destinations are all in the network.
- Other - A mixture of internal and external values makes the result indeterminate.
Answer is C
https://sc1.checkpoint.com/documents/R80/CP_R80_LoggingAndMonitoring/html_frameset.htm?topic=documents/R80/CP_R80_LoggingAndMonitoring/131915
Answer D is correct.
https://sc1.checkpoint.com/documents/R80/CP_R80_LoggingAndMonitoring/html_frameset.htm?topic=documents/R80/CP_R80_LoggingAndMonitoring/131915
Defining the Internal Network
To help SmartEvent conclude if events originated internally or externally, you must define the Internal Network. These are the options to calculate the traffic direction:
Incoming – all the sources are external to the network and all destinations are inner
Outgoing – all sources are in the network and all destinations external
Internal – sources and destinations are all in the network
Other – a mixture of and internal and external values makes the result indeterminate
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
eww_cybr
Highly Voted 2Â years agolcorona76
Highly Voted 1Â year, 8Â months agoz8d21oczd
Most Recent 6Â months, 2Â weeks agoStelloh
1Â year, 6Â months agoStelloh
1Â year, 6Â months agoHK_Wee_Me
2Â years, 2Â months agoKelassal
2Â years, 5Â months agoKelassal
2Â years, 5Â months ago