ExamGecko
Question list
Search
Search

Question 330 - 156-215.81 discussion

Report
Export

In SmartEvent, a correlation unit (CU) is used to do what?

A.
Collect security gateway logs, Index the logs and then compress the logs.
Answers
A.
Collect security gateway logs, Index the logs and then compress the logs.
B.
Receive firewall and other software blade logs in a region and forward them to the primary log server.
Answers
B.
Receive firewall and other software blade logs in a region and forward them to the primary log server.
C.
Analyze log entries and identify events.
Answers
C.
Analyze log entries and identify events.
D.
Send SAM block rules to the firewalls during a DOS attack.
Answers
D.
Send SAM block rules to the firewalls during a DOS attack.
Suggested answer: C

Explanation:

A correlation unit (CU) is a component of SmartEvent that analyzes log entries on log servers and identifies events based on predefined or custom rules1.A CU receives logs from one or more log servers and forwards them to the SmartEvent server, where they are stored in the events database

asked 16/09/2024
Bradley Coetzee
32 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first