Exam 156-315.80 topic 1 question 233 discussion

C is correct- https://sc1.checkpoint.com/documents/R80/CP_R80_LoggingAndMonitoring/html_frameset.htm?topic=documents/R80/CP_R80_LoggingAndMonitoring/131914

A is correct Tracking Options Select these options in the Track column of a rule: None - Do not generate a log. Log - This is the default Track option. It shows all the information that the Security Gateway used to match the connection. At a minimum, this is the Source, Destination, Source Port, and Destination Port. If there is a match on a rule that specifies an application, a session log shows the application name (for example, Dropbox). If there is a match on a rule that specifies a Data Type, the session log shows information about the files, and the contents of the files. Accounting - Select this to update the log at 10 minutes intervals, to show how much data has passed in the connection: Upload bytes, Download bytes, and browse time.

Accounting A is correct

C is correct

https://sc1.checkpoint.com/documents/R80/CP_R80_LoggingAndMonitoring/html_frameset.htm?topic=documents/R80/ CP_R80_LoggingAndMonitoring/131914 You can add these options to a Log, Full Log, or Network Log: Accounting - If selected, update the log every 10 minutes, to show how much data has passed in the connection: Upload bytes, Download bytes, and browse time. Suppression - If selected, one log is generated every three hours for all the connections.

A is correct for R80.10 -The three tracking options are: None, Log and Accounting https://sc1.checkpoint.com/documents/R80.10/WebAdminGuides/EN/CP_R80.10_LoggingAndMonitoring_AdminGuide/html_frameset.htm

Suppression is deprecated since R80.10 https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk116580&partition=Advanced&product=SmartConsole

Suppress is deprecated, A should be correct.

There is no suppression word in the rule. only accounting is there.

A is Correct