SmartEvent does NOT use which of the following procedures to identity events:

SmartEvent does NOT use which of the following procedures to identity events:
A . Matching a log against each event definition
B . Create an event candidate
C . Matching a log against local exclusions
D . Matching a log against global exclusions

View Answer

Answer: C

Explanation:

The procedure that SmartEvent does not use to identify events is matching a log against local exclusions. Local exclusions are used to filter out logs that are not relevant for SmartLog, not SmartEvent12. SmartEvent uses the other procedures to identify events based on event definitions, event candidates, and global exclusions3.

Reference: SmartLog R81 Administration Guide, Check Point CCSA – R81: Practice Test & Explanation, SmartEvent R81 Administration Guide, [Free Check

Point CCSA Sample Questions and Study Guide]