CCSM Advanced Security Management Practice Question
An administrator is configuring a new Security Gateway in a distributed environment. The gateway must send logs to a dedicated Log Server and also enforce policy pushed from the Management Server. The administrator has already configured the gateway object in SmartConsole and established SIC. Which additional step is required to ensure logs are stored on the Log Server?
⚠ Common exam trap
The trap here is thinking that log forwarding is a global setting or that the Log Server needs a policy, when it is actually a per-gateway configuration.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure the gateway to use the Log Server as its primary log server in the gateway's Logs and Masters settings.
In a distributed Check Point environment, Security Gateways can send logs to a dedicated Log Server. This is configured in the gateway object's Logs and Masters page in SmartConsole, where the administrator specifies the Log Server. Without this setting, logs remain local or go to the Management Server. Therefore, designating the Log Server in the gateway's properties is the required step.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Install a policy on the Log Server to enable log forwarding from the gateway.
Why it's wrong here
Log Servers do not enforce security policies; they only store and index logs. Installing a policy on a Log Server is not a valid operation because the Log Server is not a gateway. Log forwarding is controlled by the gateway's configuration, not by a policy installed on the Log Server. Therefore, this action would not achieve centralized logging.
- ✗
On the Management Server, enable the 'Forward logs to Log Server' option in the Global Properties.
Why it's wrong here
Global Properties contain settings that affect all gateways, but log forwarding to a specific Log Server is configured per gateway in the gateway's Logs and Masters settings. There is no global option to forward logs to a particular Log Server; that would be impractical in environments with multiple Log Servers. Thus, this step is incorrect for the scenario.
- ✗
Add the Log Server as a secondary Management Server in the gateway's topology.
Why it's wrong here
A Log Server is not a Management Server; it does not manage policies or objects. Adding it as a secondary Management Server would be a misconfiguration and could cause synchronization issues. The gateway's Logs and Masters settings are specifically designed to designate log servers, so this approach is technically wrong and would not direct logs to the Log Server.
- ✓
Configure the gateway to use the Log Server as its primary log server in the gateway's Logs and Masters settings.
Why this is correct
In a distributed deployment, each Security Gateway can be configured to send logs to a specific Log Server. This is done in the gateway object's Logs and Masters settings in SmartConsole, where the administrator designates the Log Server. Without this step, the gateway will log locally or to the Management Server, not to the dedicated Log Server, so this configuration is essential for centralized logging.
About these practice questions
This CCSM question is part of Courseiva's 219-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Check Point exam blueprint
This CCSM practice question is part of Courseiva's free Check Point certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CCSM exam.