Exam 156-215.81 topic 1 question 167 discussion

Check Point Certified Security Administrator (CCSA) R81.10 Guide (page 240): "For example, logging Implied rules, enabling Hit Count, and defining advanced VPN functions are all settings that are applied as Global Properties."

Enabling or Disabling Hit Count By default, Hit Count is globally enabled for all supported Security Gateways. https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_SecurityManagement_AdminGuide/Topics-SECMG/Analyzing-the-Rule-Base-Hit-Count.htm

Hit counts is enabled in global properties. In policy layer you can see/unsee the hitcount via ticking/unticking it but not enable it

Answer is C https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_SecurityManagement_AdminGuide/Topics-SECMG/Analyzing-the-Rule-Base-Hit-Count.htm

This is a trick question, the Hit Count is in the policy layer and yet it is enabled in the Global Properties. From the book included in the training class: Global Properties The Security Policy includes numerous settings that are primarily configured as Global Properties. These settings apply to a variety of Check Point products, services and functions, such as the Firewall, VPN and Reporting Tools. Settings configured as Global Properties are enforced by all Security Gateways managed by the Security Management Server. For example, logging Implied rules, enabling Hit Count, and defining advanced VPN functions are all settings that are applied as Global Properties.

B Correct

A is correct