156-215.80 · Question #210
What CLI utility allows an administrator to capture traffic along the firewall inspection chain?
The correct answer is D. fw monitor. fw monitor is the Check Point-specific CLI tool designed to capture packets at multiple inspection points within the firewall kernel chain. It intercepts traffic at four hook points: pre-inbound (i), post-inbound (I), pre-outbound (o), and post-outbound (O), allowing administrato
Question
What CLI utility allows an administrator to capture traffic along the firewall inspection chain?
Options
- Ashow interface (interface) -chain
- Btcpdump
- Ctcpdump /snoop
- Dfw monitor
How the community answered
(48 responses)- A2% (1)
- B2% (1)
- C6% (3)
- D90% (43)
Explanation
fw monitor is the Check Point-specific CLI tool designed to capture packets at multiple inspection points within the firewall kernel chain. It intercepts traffic at four hook points: pre-inbound (i), post-inbound (I), pre-outbound (o), and post-outbound (O), allowing administrators to trace a packet's journey through the Security Gateway's inspection path. tcpdump is a general-purpose Unix packet sniffer that captures raw traffic on a network interface but has no awareness of the Check Point inspection chain. The other options ('show interface -chain' and 'tcpdump /snoop') are not valid Check Point CLI commands.
Topics
Community Discussion
No community discussion yet for this question.