C is the correct.

It's none according to Checkpoint R81.20 study guide Page 378 https://read.kortext.com/reader/pdf/2342938/378

Which one it is then lol? Checkpoint site says it is C but I work with Checkpoint on a daily basis and I know it is A (none)

It's C as per: https://sc1.checkpoint.com/documents/R80.20_GA/WebAdminGuides/EN/CP_R80.20_LoggingAndMonitoring_AdminGuide/html_frameset.htm?topic=documents/R80.20_GA/WebAdminGuides/EN/CP_R80.20_LoggingAndMonitoring_AdminGuide/121059 Log - This is the default Track option. It shows all the information that the Security Gateway used to match the connection. At a minimum, this is the Source, Destination, Source Port, and Destination Port. If there is a match on a rule that specifies an application, a session log shows the application name (for example, Dropbox). If there is a match on a rule that specifies a Data Type, the session log shows information about the files, and the contents of the files.

The question is the default tracking option, not the default rule tracking. When you enable tracking on a rule, the default option is Log. Per https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_LoggingAndMonitoring_AdminGuide/Topics-LMG/Tracking-Options.htm Log is the default tracking option.

Correct is A, the default track when creating a freshly new policy is NONE Then if wanted to add tracking it does switch to logging and logging+accounting if specified. It is a bit misleading and depending on the POV could be both

A - None. If you create a new rule, the default track is NONE

The right one is A, just checked in Smartconsole R81.20

Cmnon Guys . If you create a new rule in security policies and you do not define a track action the default is clearly None . So the correct action is A

C is the correct answer. "Log -This is the default Track option. It shows all the information that the Security Gateway used to match the connection."

Default Tracking is None