In Logging and Monitoring, the tracking options are Log, Detailed Log and Extended Log. Which of the following options can you add to each Log, Detailed Log and Extended Log?
A. Accounting
B. Suppression
C. Accounting/Suppression
D. Accounting/Extended
|
Download Printable PDF. VALID exam to help you PASS. |
 |
Correct answer C
Text from https://sc1.checkpoint.com/documents/R80/CP_R80_LoggingAndMonitoring/html_frameset.htm?topic=documents/R80/CP_R80_LoggingAndMonitoring
You can add these options to a Log, Full Log, or Network Log:
Accounting – If selected, update the log every 10 minutes, to show how much data has passed in the connection: Upload bytes, Download bytes, and browse time.
Suppression – If selected, one log is generated every three hours for all the connections.
Agree with Gello, as per R80.10 and above. Log actions has been changed
If we look at “Good Luck Guys” he is also correct, for firmware R80: However, his answer would have been correct if the question was Network Log and Full Log.
Question asks the new format: Detailed and Extended, hence Account(A) is correct
Tracking Options
Network Log – Generates a log with only basic Firewall information: Source, Destination, Source Port, Destination Port, and Protocol.
Log – Equivalent to the Network Log option, but also includes the application name (for example, Dropbox), and application information (for
example, the URL of the Website). This is the default Tracking option.
Full Log – Equivalent to the log option, but also records data for each URL request made.
If suppression is not selected, it generates a complete log (as defined in pre-R80 management).
If suppression is selected, it generates an extended log (as defined in pre-R80 management).
So, Accounting/Suppression is correct.
It’s still A. Your reference even proves it. The suppression option was only available on R80, in which R80 had the option: Log, Full Log, and Network Log.
Now and even the question asks: Log, Detailed Log, and Extended: which only allows us Accounting. Suppression is still there, but that is already done by the SMS itself, no need to enable or disable it.
I think A…
i never see “Accounting/Suppression” in smart console….
https://sc1.checkpoint.com/documents/R80.10/WebAdminGuides/EN/CP_R80.10_LoggingAndMonitoring_AdminGuide/131914.htm
Advanced Track options
Detailed Log and Extended Log are only available if one or more of these Blades are enabled on the Layer: Applications & URL Filtering, Content Awareness, or Mobile Access.
Detailed Log – Equivalent to the Log option, but also shows the application that matched the connections, even if the rule does not specify an application. Best Practice – Use for a cleanup rule (Any/Internet/Accept) of an Applications and URL Filtering Policy Layer that was upgraded from an R77 Application Control Rule Base.
Extended Log – Equivalent to the Detailed option, but also shows a full list of URLs and files in the connection or the session. The URLs and files show in the lower pane of the Logs view.
Tracking Options
Select these options in the Track column of a rule:
None – Do not generate a log.
Log – This is the default Track option. It shows all the information that the Security Gateway used to match the connection. At a minimum, this is the Source, Destination, Source Port, and Destination Port. If there is a match on a rule that specifies an application, a session log shows the application name (for example, Dropbox). If there is a match on a rule that specifies a Data Type, the session log shows information about the files, and the contents of the files.
Accounting – Select this to update the log at 10 minutes intervals, to show how much data has passed in the connection: Upload bytes, Download bytes, and browse time.