Question 30
At the Corlissport research and development institute, a branch reports blocked connections and the analyst opens appliance configuration pages rather than looking for connection records. Which interpretation best explains what is happening?
Explanation
Correct Answer
Traffic logs and event information support investigation of policy outcomes; platform configuration alone cannot show each connection. This directly explains the reported condition at the Corlissport research and development institute; it supports the decision to use Logs and Events in SmartConsole to filter the connections by time, source, destination, and action.
Incorrect Answers
That statement describes security policies view: policy authoring and ordered rules belong in Security Policies; event searches show observed traffic. At the Corlissport research and development institute, however, the reported facts indicate that traffic logs and event information support investigation of policy outcomes; platform configuration alone cannot show each connection.
That statement describes management connection failure: management-plane availability and gateway data-plane forwarding are related but distinct concerns. At the Corlissport research and development institute, however, the reported facts indicate that traffic logs and event information support investigation of policy outcomes; platform configuration alone cannot show each connection.
That statement describes three-tier management boundary: smartConsole administers policy through the management server, while a security gateway enforces the installed policy. At the Corlissport research and development institute, however, the reported facts indicate that traffic logs and event information support investigation of policy outcomes; platform configuration alone cannot show each connection.