This question asks about protocols. I don't know what protocols R80 can work with, but R77 works with the following (Manual-CCSE-R77.3_ebook, page 213): ELA SAM AMON CPMI CPLOG FWM Command Guaranteed Delivery CPTA Dbsync CPD and FWD is pocesses, not protocols. Right answer is D.

According to the CCSE Manual: "The Log Server is responsible for storing logs collected from Check Point Security Gateways and Third-Party devices. The Correlation Unit connects to the Log Server to read the logs using the LEA (Log Export API) protocol. The Log Server uses port 18184 for this connection by default." In addition to this, logs are sent using FWD. On that basis it must be B.

Cpsemd - legacy SE actions - install event policy. Auto reaction. SE gui. Cpsead - correlation unit using LEA to create events. FWD - in log server - receive logs CPD - not relevant

Right answer is not included in the options. SmartEvent and SmartReporter are governed by the CPSEAD and CPSEMD processes. https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk95153

Right answer is B there is no such process as CPLOG https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk97638#Security%20Management%20Software%20Blades%20and%20Features%20-%20SmartEvent%20Blade

For me A is more correct because ELA and CPD are related to events : ELA on Port 18187 : used for event log API between the SMS and OPSEC CPD on 18192 aka CPD_amon : is used by SmartEvent So these two protocols are used by SmartEVENT

I suspect it's a typo and D should be LEA instead of ELA

Not sure on this one, since LEA and ELA are used by OPSEC. FWD is also responsible for logging based on infrastructure services.