ExamGecko
Question list
Search
Search

Question 287 - 156-215.81 discussion

Report
Export

A network administrator has informed you that they have identified a malicious host on the network, and instructed you to block it. Corporate policy dictates that firewall policy changes cannot be made at this time. What tool can you use to block this traffic?

A.
Anti-Bot protection
Answers
A.
Anti-Bot protection
B.
Anti-Malware protection
Answers
B.
Anti-Malware protection
C.
Policy-based routing
Answers
C.
Policy-based routing
D.
Suspicious Activity Monitoring (SAM) rules
Answers
D.
Suspicious Activity Monitoring (SAM) rules
Suggested answer: D

Explanation:

If a network administrator has identified a malicious host on the network and instructed you to block it, but you cannot make any firewall policy changes at this time, you can use Suspicious Activity Monitoring (SAM) rules to block this traffic. SAM rules are temporary rules that allow you to block or limit traffic from specific sources or destinations without modifying the security policy. SAM rules are created and managed by SmartView Monitor and are enforced by the security gateway for a specified duration. Anti-Bot protection, Anti-Malware protection, and Policy-based routing are not tools that can be used to block traffic without changing the firewall policy.

Reference: [Check Point R81 SmartView Monitor Administration Guide]

asked 16/09/2024
Salah Dabwan
25 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first