exam questions

Exam 156-215.80 All Questions

View all questions & answers for the 156-215.80 exam

Exam 156-215.80 topic 1 question 333 discussion

Actual exam question from Checkpoint's 156-215.80
Question #: 333
Topic #: 1
[All 156-215.80 Questions]

SmartEvent does NOT use which of the following procedures to identity events:

  • A. Matching a log against each event definition
  • B. Create an event candidate
  • C. Matching a log against local exclusions
  • D. Matching a log against global exclusions
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️
Reference:
https://sc1.checkpoint.com/documents/R76/CP_R76_SmartEvent_AdminGuide/17401.htm

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Nikolas
Highly Voted 1 year, 3 months ago
from CCSE R80 guide: SmartEvent uses the following procedures to identify events: • Matching a log against global exclusions • Matching a log against each event definition • Creating an event candidate • Updating an event
upvoted 7 times
abhijitlaxab
5 months, 2 weeks ago
That's right, so as per question, its C - matching a log against local exclusion
upvoted 2 times
...
...
rafaelrodroliveira1988
Most Recent 9 months, 1 week ago
https://sc1.checkpoint.com/documents/R80.30/WebAdminGuides/EN/CP_R80.30_LoggingAndMonitoring_AdminGuide/html_frameset.htm?topic=documents/R80.30/WebAdminGuides/EN/CP_R80.30_LoggingAndMonitoring_AdminGuide/120829
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago