View all questions & answers for the Check Point Certified Security Administrator (CCSA) R82 Exam Materials exam

Check Point Certified Security Administrator (CCSA) R82 Exam Materials - Question #114 Discussion

Comment Image Comment Image Comment Image

What type of logs capture security‑related events such as firewall activity and VPN connections? (Choose one answer)

  • A. Audit Logs
  • B. Security Logs
  • C. Compliance Logs
  • D. Traffic Logs
Correct Answer: B

Brave-Dump Community Votes

Answer: B (1 vote) 100%

Community Explanations & Comments (1)

Anonymous User 1 month ago
Selected: B
The correct answer is B. Security Logs.ExplanationAccording to Check Point log field specifications, logs are fundamentally divided into two major operational categories:Security Logs: Generated by the Security Gateways to capture traffic-enforcement events. This includes traditional firewall activity (rule matches, accepts, drops) and VPN tunnels/connections, alongside advanced blade activity like Application Control, URL Filtering, and Threat Prevention.Audit Logs: Generated exclusively by the Management Server to record administrative actions. This captures "who did what," tracking events such as administrator logins, publishing policy changes, or modifying gateway configurations.