Exam 156-215.81.20 topic 1 question 137 discussion

AI answer (copilot), I agree with it so C make sense. Yes, the Extended Log tracking option in Check Point can capture file attributes. These attributes include: File Name: The name of the file being transferred. File Type: The type or extension of the file (e.g., .pdf, .exe). File Size: The size of the file in bytes. File Hash: A hash value (e.g., MD5, SHA-256) for verifying file integrity. File Path: The path or location of the file on the network

What an awful question, I would most likely go with C.

The correct answer is C. file attributes. The "Extended Log" tracking option includes all the information that the "Log" option provides, plus additional details such as a full list of URLs and files in the connection or session, which includes file attributes.

Answer A, data

There is no valid answer, but C is the closest one Read carefully this statement: Log - This is the default Track option. It shows all the information that the Security Gateway used to match the connection. At a minimum, this is the Source, Destination, Source Port, and Destination Port. If there is a match on a rule that specifies an application, a session log shows the application name (for example, Dropbox). If there is a match on a rule that specifies a Data Type, the session log shows information about the files, and the contents of the files. I understand the "Log" tracking option contains all the answers presented so there is no a valid one. Refer to https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_LoggingAndMonitoring_AdminGuide/Topics-LMG/Tracking-Options.htm

Advanced Track options Detailed Log and Extended Log are only available if one or more of these Blades are enabled on the Layer: Application & URL Filtering, Content Awareness, or Mobile Access. Detailed Log -Equivalent to the Log option, but also shows the application that matched the connections, even if the rule does not specify an application. Best Practice - Use for a cleanup rule (Any/internet/Accept) of an Applications and URL FilteringClosed Policy Layer that was upgraded from an R77 Application ControlClosed Rule BaseClosed. Extended Log -Equivalent to the Detailed option, but also shows a full list of URLs and files in the connection or the session. The URLs and files show in the lower pane of the Logs view.

I agree with Gallileo9. The link tells clearly, is the same link that joaomrogerio has but I don't know why he chooses A

It's C "Files - Shows all the files uploaded or downloaded in the session. These show if Extended Log is selected in the Track option of the rule, or if a Data Type was matched on the connection." https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_LoggingAndMonitoring_AdminGuide/Content/Topics-LMG/Working-with-logs.htm?Highlight=%22Extended%20Log%22

Its A. https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_LoggingAndMonitoring_AdminGuide/Content/Topics-LMG/Working-with-logs.htm?Highlight=%22Extended%20Log%22