CheckPoint Exam 156-315.80 Topic 7 Question 84 Discussion

Actual exam question for CheckPoint's 156-315.80 exam

Question #: 84
Topic #: 7

During inspection of your Threat Prevention logs you find four different computers having one event each with a Critical Severity. Which of those hosts should you try to remediate first?

AHost having a Critical event found by Threat Emulation

BHost having a Critical event found by IPS

CHost having a Critical event found by Antivirus

DHost having a Critical event found by Anti-Bot

Show Suggested Answer

Suggested Answer: D

by Dong at Apr 08, 2025, 11:27 PM

Limited Time Offer

25%

Off

Get Premium 156-315.80 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Celestina

8 days ago

I disagree, I believe we should focus on the host with Critical event found by IPS as it may indicate an active attack.

upvoted 0 times

...

Mignon

14 days ago

B) Host having a Critical event found by IPS is the way to go. That's the one that could be actively stopping attacks, right?

upvoted 0 times

...

Dannette

20 days ago

I agree with Florencia, Threat Emulation is designed to catch advanced threats so it's important to address that first.

upvoted 0 times

...

Florencia

21 days ago

I think we should remediate the host with Critical event found by Threat Emulation first.

upvoted 0 times

...