Câu 40: 156-31580: Check Point Certified Security Expert - R80

The Correlation Unit performs all but the following actions:

1. A. Marks logs that individually are not events, but may be part of a larger pattern to be identified later.
2. B. Generates an event based on the Event policy.
3. C. Assigns a severity level to the event. — đáp án hiện tại
4. D. Takes a new log entry that is part of a group of items that together make up an event, and adds it to an ongoing event.