Câu 126: 156-31577: Check Point Certified Security Expert

You have selected the event Port Scan from Internal Network in SmartEvent, to detect an event when 30 port scans have occurred within 60 seconds. You also want to detect two port scans from a host within 10 seconds of each other. How would you accomplish this?

1. A. Define the two port-scan detections as an exception. — đáp án hiện tại
2. B. You cannot set SmartEvent to detect two port scans from a host within 10 seconds of each other.
3. C. Select the two port-scan detections as a sub-event.
4. D. Select the two port-scan detections as a new event.