In SmartEvent, a correlation unit (CU) is used to do what?

In SmartEvent, a correlation unit (CU) is used to do what?
A . Collect security gateway logs, Index the logs and then compress the logs.
B . Receive firewall and other software blade logs in a region and forward them to the primary log server.
C . Analyze log entries and identify events.
D . Send SAM block rules to the firewalls during a DOS attack.

Answer: C

Explanation:

https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/CP_R80.40_Logging AndMonitoring_AdminGuide/Topics-LMG/SmartEvent-Correlation-Unit.htm