You have enabled "Extended Log" as a tracking option to a security rule. However, you are still not seeing any data type information. What is the MOST likely reason?
Detailed Log and Extended Log are only available if one or more of these Blades are enabled on the Layer: Application & URL Filtering, Content Awareness, or Mobile Access.
https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_LoggingAndMonitoring_AdminGuide/Topics-LMG/Tracking-Options.htm
First words of the question: You have enabled "Extended Log".
If Content Awareness was not enabled, you would not be able to enable Extended Logging. So D is incorrect.
The correct answer is D.
The Detailed Log and Extended Log options become available if either one of these
blades is enabled in the layer: Application Control & URL Filtering, Content
Awareness, or Mobile Access.
Guys this is a tricky question."Detailed Log and Extended Log are only available if one or more of these Blades are enabled on the layer:
Applications and URL Filtering, Content Awareness, Mobile Access"
I mean if u can enable extended log, it is enough to choose one of them.In this question, they can enable extended log. So, it isnt about blades.
If you have a disk space issue entire log will not be visible, or checkpoint will do a log rotation. Here most viable answer will be D as content awareness should be enable to see datatype information
I would say D is correct.
The question says extended log is enabled, so content awareness have to be enabled in the layer. But maybe content awareness Blade is not enabled in the gateway, being the reason for the data type info missing.
Lab test.
Checkpoint R81 Certified Security Administrator Guide page 553: Detailed Log and Extended Log are only available if one or more of these Blades are enabled on the Layer: Application & URL Filtering, Content Awareness, or Mobile Access.
Detailed Log and Extended Log are only available if one or more of these Blades are enabled on the Layer: Application & URL Filtering, Content Awareness, or Mobile Access.
https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_LoggingAndMonitoring_AdminGuide/Topics-LMG/Working-with-logs.htm
Trick question, note that Extended logs option is only available if you have switched on one of the content awareness blades. The question implies the blade is on else you will not see the extended logs options
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
tosyeno
Highly Voted 2 years agoBillNosie
Most Recent 9 months, 3 weeks agoNando0505
1 year agoLegitimateBuilding6
1 year, 1 month agomfhashmi
1 year, 3 months agoumutgg
1 year, 4 months agohvasquez
1 year, 4 months agodarkdante24
1 year, 5 months agoRitchie84
1 year, 6 months agoCPMando
1 year, 7 months agoShahrouz
1 year, 8 months agoyuop
1 year, 9 months agoNineInchName
1 year, 10 months agoDS0001
1 year, 11 months agojericojuce
1 year, 11 months agoInitial14
1 year, 12 months agosimo94
2 years ago